If you're hosting on MobileMe it's suppose to have some options. Otherwise, if the web server is Apache based then you can password protect a directory using a .htaccess file. You can easily find material on that with Google. Some web host also offer an interface to set this up as well so I suggest checking with your host.