I created a password-protected page the other day and then all of a sudden today someone I don't know in real life (I only gave the password to some friends I know in person) commented and asked me about the page. I found that it showed up in the page list on the sidebar of my page. It's also possible that the page itself showed up without needing a password (I logged out of WP and emptied my browser cache and still was able to get into it without the password prompt, although the page title still read "Password Protected:" and then the page title).
1) Does a password-protected page automatically show up in the list of other pages in the sidebar (on Oulipo)? If so, how do I change this?
2) How can I be certain that my password-protected page is truly password-protected? Was my test (emptying the browser cache and logging out of WP) adequate?
The blog I need help with is imperfecthappiness.wordpress.com.