How to Use Secure Downloads in WordPress

Why You Need It

Direct file URLs allow anyone to download your media files without visiting your site. Secure Downloads uses signed URLs that expire after a configurable time, preventing hotlinking and unauthorized access.

How to Enable this Feature

Step 1: Navigate to Settings

Click into the Classic Monks plugin settings, then the Performance tab, Media Enhancements subtab.

Step 2: Enable the Feature

Toggle on the feature.

Step 3: Save and Test

Click Save Changes. Test on the frontend.

Common Use Cases

Premium content sites

Sites offering downloadable content (ebooks, courses, templates) benefit from secure downloads that prevent unauthorized sharing.

Membership sites

Members-only content should not be accessible via direct file URLs. Secure Downloads ensures only authenticated users can access files.

Before you enable this feature

1. Test on staging first to verify no conflicts with your theme or other plugins
2. Check dependent plugins that may rely on the functionality being modified
3. Monitor after enabling for any unexpected behavior on the frontend

How it works under the feature

This feature runs during the WordPress initialization phase. When enabled, its PHP code registers hooks that modify specific WordPress behaviors. The changes are non-destructive and reversible.

No database schema changes are made. The feature state is stored as a boolean value in the wp_options table and can be toggled at any time from the admin settings.