i'm going to add a htaccess / htpasswd
These files are usually used by webservers - not ftp servers. Some ftp servers will look for such files but you didn't say what ftp server you are using.
However since the FTP protocol sends passwords in clear text, and there's the additional complications around the secondary data channel, really you should use something else if you're really concerned about security (scp or sftp).
Since your "host suspended the website temporarily" your not hosting the site yourself - so what level of control over the server do you have? Even if you don't have root access, the hosting company may already provide ssh access (which usually implies scp or sftp).
Do make sure you pick a strong password.