I have set a page to be password protected in the admin, but for some reason WP is not asking for the password when viewing the page.
It definitely isn’t a plugin as I have confirmed the behaviour with the plugin folder renamed. I have been testing it in Chrome w/incognito.
The page is using a custom template, which may be the problem? No other templates I have looked at though seem to display any password logic.
The answer to this question was simply that the built-in password protection does not apply if you are using a custom template that doesn’t include
the_loop(). Lesson learnt.