Ability already there, just create file.
If you want to up permissions, in httpd.conf you need to change on a per directory basis AllowOverride (like AllowOverride All)
If you are just password protecting
http://www.htaccesstools.com/htpasswd-generator/