To protect REST APIs, using SSL for encryption ensures that the data transmitted between the client and server is encrypted, thus protecting it from interception by unauthorized parties. Additionally, using a password hash helps in safeguarding credentials by storing them in a hashed format rather than plain text, making it difficult for attackers to retrieve the actual passwords even if they gain access to the storage.