Right off the bat, I would reccommend just PMing the password to people that are interested in your mod. If a person who is a stranger wants to download your mod, wouldn't they look at the forums post to get the download link, thus seeing the password that is in the same post?
Looking forward...