Anyone with the admin password can change the user password. Just log on to the server as an admin (enter the admin password in the "host password" input field. Then type /pass mypassword
Now your server is password protected and users can not enter it without knowing the user password. To clear the password simply type /pass
See lfs/docs/commands.txt for more info.