Apache doesn't care where you put the password file, so how can you not have access to it?

Just put it in the same directory as the .htaccess file, call it .htpasswd, and then do something like this in the .htaccess:

AuthUserFile /usr/www/users/me/privatedir/.htpasswd

The link above tells you how to make the file.

Alex