WooCommerce downloadable product file protection Print

Quick answer

A downloadable product needs both a file-delivery method and an order-access policy. A public Media Library URL alone does not reliably restrict a paid download to customers. Test delivery through the customer purchase flow.

Before you start

Confirm that you have rights to distribute the file and that your hosting supports the selected delivery method. Work with a non-sensitive sample file first. Decide whether the product also requires shipping, whether login is required, and when access should begin.

Steps

1. Open the product and enable Downloadable. Enable Virtual only when the item does not require physical shipping. Add the file through the product's downloadable-file controls and set any approved download limit or expiry.
2. Review WooCommerce's downloadable-product settings. Choose a supported protected delivery method and confirm any approved storage location. Understand that a direct redirect can expose the underlying file URL.
3. Set the account and payment-access policy for this store. Do not grant access merely because an unpaid order record exists. Keep payment confirmation and order fulfillment status distinct.
4. Place a sandbox order on staging. Check the order page, notification email, and My Account download entry, where applicable. Test an expired or unauthorized link and verify the intended denial behavior.

Verify the result

A permitted customer should receive the correct file, and a visitor without the required entitlement should not gain access through the normal file URL. Test a realistically sized file to catch memory or timeout limits.

Troubleshooting and recovery

If delivery fails, check file location, permissions, chosen method, order status, and download permissions. Do not switch to an insecure public URL solely to hide the failure. Preserve the current configuration before changing it.

Related help

• Store website backups outside public web access
• Connect a WooCommerce payment gateway to a protected sandbox
• Run a WooCommerce checkout test without affecting live customers

Official references

• WooCommerce downloadable products
• WooCommerce test orders

Reviewed October 31, 2026. Interfaces, vendor availability, and account features can change. Check your current account before making changes.