If you publish your site to MobileMe (but not if you publish to a folder or use FTP to publish to a different hosting service), you can require visitors to type a name and password to view your site. This works for entire websites only; you can’t password-protect individual pages only.
Select the website you want to protect by clicking its name in the sidebar on the left of the iWeb window.
In the Privacy section of the Site Publishing Settings window that opens, select “Make my published site private.”
Type a user name and password in the fields.
All visitors will use the same user name and password.
Click the Publish Site button in the toolbar at the bottom of the iWeb window.
When you publish your website and click Announce, iWeb creates an email message—including the user name and password—that you can send to friends and family to let them know about your website.
To remove password protection from a site, deselect “Make my published site private” and republish.
Important:Don’t use your MobileMe user name or password. Passwords are case-sensitive and must use between 6 and 20 characters. User names must use between 3 and 20 characters. Passwords and user names can include any combination of letters, numbers, and symbols, but they can’t include spaces.