Avast will not impose a password protection unless a user sets the option and defines the password. That’s a fact. User action is required. Maybe someone else did enable that option on your PC without you knowing it?