If it needs a password, it's probably a fake or full of malware. P2p and IIRC is the only way to go, and I never trusted upload sites, they have slow downloads and remove content after a period of time.
If you are interested, Nyaa and tokoyotosho are two sites that are trackers for most of the worlds fan subbers





