To make your app private:
Only users with the password or direct link will be able to access a protected app.