To protect a directory in your hosting account with a password, in that directory, create an .htaccess file that contains the following:
/yourabsolutehostingpath is your hosting account's absolute hosting path. For more information, see Find your absolute path.
The AuthUserFile describes where the Web server looks for the .htpasswd file. The .htpasswd file contains a list of users who have access to a protected directory and their hashed passwords. There are a number of tools available online to create .htpasswd files.
Our servers are configured to prevent the downloading of both .htaccess and .htpasswd files.