What is the best way to secure an API in Flask?

I don't want to use a library because I want to understand it. Also, I want my API to be secure because I will be using a "password" and I want it to be secure.