Yes it’s part of the core functionality as FragaGeddon says. If you want more features (you mention security) you could use the s2 member plugin. The free version is fine for most users and you can control what your members can see, download etc. It can also integrate with a mailchimp mailing list so useful if you’re building a mailing list.
Hope that helps.