<Directory /usr/local/apache/htdocs/private>
AuthType Basic
AuthName "Password required"
AuthUserFile /usr/local/apache/passwords/pass
AuthGroupFile /usr/local/apache/passwords/group
Require user tom bob harry
</Directory>
Yes, you can put this in a .htaccess file, but you don't have to