Download links that cannot be shared
3 November 2026 · module Secure Downloads for WooCommerce
Files distributed by WooCommerce are served from a guessable URL. This module replaces them with a relay using a single-use token.
One token, one use
Each download link expires after use: it cannot be shared. An inspector shows the file's real URL, the link type and the URL handed to the customer.
Up to 25 GB
The relay serves the file in chunks, resume included, without loading PHP memory.
A verified library
Every file is indexed, weighed, hashed. The library gives its size, its fingerprint and its status: you see at once if something has changed.
Limits, lifted for up-to-date customers
Limits per IP address and per account, lifted for your up-to-date customers. Order-based access shows the expiry and status, with manual extension if needed.
The log
Who downloaded what, from which address and with which system. The settings cover scanning, alerts, log retention and address anonymisation.
Requirements and licence
WordPress 6.5 or later, WooCommerce 8.0 or later, PHP 7.4 to 8.3. 39 €, once: perpetual licence. The optional renewal (19 €/year) only covers updates and support. Without a licence key entered, the module contacts no server.
Secure Downloads for WooCommerce · 39 € · perpetual licence, 1 year of updates.