This section shows you how to use .htaccess to do this. It assumes, that you want the effect to apply to the whole site. The .htaccess file specifies the extent of the protection - it does not contain the passwords. These are stored in a separate file called .htpasswd.