In apache i have the following in my main apache config file httpd.conf and
my password in a htaccess file.

<VirtualHost *>
DocumentRoot /usr/home/xxxx
ServerName www.xxxx. co. uk
DirectoryIndex index.htm index.html index.php
<Directory "/usr/home/xxxx/">
Options -Indexes
AllowOverride All
AuthType Basic
AuthName "Admin Area"
AuthUserFile "/usr/home/xxxx/.htpasswd
Require valid-user
</Directory>
</VirtualHost>


Can anyone tell me is this pretty good security and setup correctly?.
Would i be better putting the above config into a htaccess file rather than
the main httpd.conf ?
Anything i should change?.

Thank you
Andy