From what I've read, only if you're hosted on MobileMe. Otherwise you'll have to use methods outside of iWeb. If you're being hosted on an Apache web server then you can make use of the .htaccess file to create a password protected area. It's easy to find info on that via Google.