Sounds like htaccess is the best option for you, and it's very secure. Have a look at this, it will probably explain it better than me:
Link
edit: check part 3 for password protection
Which host are you with BTW? I know some set them up for you, like fasthosts for exampe.