fresh start with MDBT42Q , some specs before start toe code

Ok
so we are on the right way :-)

security question (before I continue with the python)
is there any way I can secure the connection ?
I will explain
right now
if someone will take a computer and run "Espruino Web IDE", scan - he will see my device.
and then he will be able to connect to him and do what evert he want - right?
(the same way I'm running now and uploading the code).
How can I make him request password before connecting ?

and another question
can I use this security (password) in order to connect to the device and read the data ?
I want only verified devices to be able to read the Espruino data
right now any one can connect and read

Thanks,