Each portal can be password-protected independently. When it is on, you set a password and share it with the client alongside the link. When it is off, anyone with the link can open the portal.
You can switch protection on or off at any time without recreating the portal or changing its link.