Steve's password suggestion is good.

I usually show client's their projects by adding a directory to my own domain and uploading their stuff there.

If there is an existing site in place, it takes only one slip to overwrite the live one accidentally.