Please read this page on the WP Codex. ACF functions as custom fields behave by default in WP. If you want to password protect the custom field data then this is something you need to check for and manage.
https://codex.wordpress.org/Using_Password_Protection
