.htaccess all the way. Do a
Google search for that term, and you'll hit paydirt. Do not forget the period in front of htaccess.
It's old, and not that efficient for adding individual passwords, but great if you are issuing one password to a group.
Just my 2 cents.
pman