Can I keep a blog I am developing private till it is approved.

I have a client who wants his WP site totally revised. He wants to keep his revised site private till he approves the revision. The only way I can see to do this is to keep each page a draft until it is approved.

Can I publish a password protected website? What plugin or widget should I use to accomplish that.