If you don't have those, erase the drive with disk utility and set it to require a password before it will mount. That should do. (of course, you're going to have to erase it first)
If it's going to have only data/user files on it (no OS install), I recommend HFS+ (Mac OS extended with journaling enabled) instead of APFS, especially for a platter-based hard drive.