How to stop visits to certain folders

Hi this question has no code but how do i stop people being able to just add to the end of the url "/users/passwords.txt" to access the writing on the file. Like in a way lock access to a certain folder from url? I just dont want people to access the files from url