Originally Posted by rowan

I don't see why it shouldn't be possible, the "AuthUserFile" directive in Apache references a full path and filename, which means you should be able to use it more than once.

Here's an example, you would place this in .htaccess in both directories you wish to protect.

AuthName "member area"
AuthType Basic
AuthUserFile /path/to/htpasswd
require valid-user