Replying to my own email... It seems my hosting provider uses cPanel, which has a tool for configuring password protection on directories with .htaccess and .htpasswd
I am going to try it, since the tool should do the Right Thing. However, thanks again for the offers of help, as I now understand the underlying mechanism. Best wishes, Andrew
