Hi Natalia,
If you are using Business Catalyst as a host , then "Yes" you need to publish a website to use Secure zone of Business Catalyst.
If you are using a different host or BC then you may use third party widgets like
Adobe Muse Password Protection Widget | MuseThemes.com
Thanks
Prabhakar Kumar