password protection means you'll have 0 visitors. it's better to do proof-of-work instead. which means, the visitor's computer solves some cryptographic puzzle to prove that it has spent energy and therefore money to visit the website. that makes scraping millions or billions of websites practically too expensive to do, while if you only visit a single website, it's still reasonably cheap to do.