Steve's password suggestion is good.
I usually show client's their projects by adding a directory to my own domain and uploading their stuff there.
If there is an existing site in place, it takes only one slip to overwrite the live one accidentally.
Bookmarks