Only you can answer the question as to whether a security method is adequate for your site or not.
<b>.htaccess</b> will only be refrencing the passwords that you put in to <b>.htpasswd</b> which will already be encrypted (if your installation is normal).
If you want higher levels of security, you will probably want to go the <b>ssl/https</b> route.
-- Rich