Downloadable products require more than uploading a file to a WooCommerce product. Store administrators must distinguish the number of permitted downloads, the period during which access remains available, the order status that grants access, individual permissions and the method used to deliver the file. Treating these controls as one setting can lead to unnecessary support cases or unintended changes for existing customers.
This guide explains the documented WooCommerce behavior behind download access management. It separates configuration controls from store-policy decisions, shows where customers receive their links, explains the difference between replacing an existing file and adding a new one, and provides a practical process for granting, revoking and troubleshooting access. No single limit or expiry period is presented as suitable for every product.
What WooCommerce Download Access Controls Actually Manage
Limits, expiry and permissions are separate controls
The Download limit field controls how many times a customer can download a file. If the field is left blank, downloads are unlimited. The Download expiry field controls how many days after purchase download access remains available. If it is left blank, there is no expiry.
These fields answer different questions. A limit concerns the number of permitted downloads, while expiry concerns the period in which those downloads can occur. Neither field alone explains whether access has already been granted. Access also depends on the relevant order status and, for individual exceptions, the downloadable permissions attached to the order.
Choosing Download Limits and Expiry by Product Use Case
Translate product policy into WooCommerce fields
Configure the fields according to the product type, expected customer behavior and your store’s support policy. A reusable asset may require a different approach from a document intended for a particular transaction. The available WooCommerce fields provide the controls, but they do not establish a universal number of downloads or days that every store should use.
Before entering a value, decide whether customers are expected to download the file repeatedly and how long access should remain available. Then translate those decisions into the product settings:
- Enter a download limit when your policy defines a maximum number of downloads.
- Leave the limit blank when unlimited downloads are an intentional policy choice.
- Enter an expiry period when access should end after a defined number of days from purchase.
- Leave expiry blank when no expiry is an intentional policy choice.
Document the decision internally so support staff can explain why a link may stop working because the permitted count has been used or the access period has ended. Avoid assuming that unlimited downloads or no expiry is appropriate for every product.
When Customers Receive Download Access
Processing versus Completed
WooCommerce can grant access after payment when Grant access to downloadable products after payment is enabled. In that configuration, customers can access downloads while the order is in Processing, rather than waiting for Completed.
When the after-payment access setting is not enabled, customers generally receive access when the order reaches Completed. Products marked both virtual and downloadable can move automatically to Completed. Downloadable-only products may require an administrator to complete the order. Consequently, a customer who has paid may still be waiting for the status update that makes the download available.
When diagnosing timing, check payment confirmation and the current order status before changing product limits. Payment-gateway delays, hosting configuration and customizations can also affect the observed behavior, so access should not be promised independently of the store’s processing flow.
Customer access points
Customers can receive download links in the order email. When they have an account, they can also find available downloads under My Account > Downloads. These locations are useful when a customer reports that a file is missing: first establish whether the order has reached the status that grants access, then check the email and account area.
The presence of an order does not by itself establish that every file associated with a product is available. The product’s access timing, the order status and the permissions for the specific downloadable item all remain relevant.
Replacing Files Versus Adding New Files
Editing an existing file row
WooCommerce treats an edited existing file row differently from a newly added file. If an administrator edits an existing downloadable file row, including changing its name or URL, download links on past purchases are updated. The existing expiry date and remaining download count are preserved for those purchases.
This behavior is useful when an existing file needs to be replaced while previous customers should retain the access rules already attached to their purchases. It does not mean that customers are automatically notified; the documented behavior establishes the link update, expiry preservation and remaining count, not a notification process.
Before replacing a customer-facing file, test the workflow with a staging order or controlled customer account. Confirm that the resulting link points to the intended file and that the previous expiry and remaining count behave as expected.
Adding a new file
Adding a new downloadable file to a product does not affect past orders by default. Earlier purchasers do not automatically receive permission for the newly added file. New purchasers receive permission for the newly added file by default.
This distinction matters when publishing a new version, supplementary material or an additional download. Editing an existing row updates links for previous purchases, whereas adding a new row leaves past orders unchanged. Do not describe the second action as granting earlier customers lifetime access, and do not assume that either action automatically sends a customer message.
Granting or Revoking Access for an Individual Order
Order-level permission workflow
Individual access changes should be handled on the relevant WooCommerce order rather than by changing unrelated product settings. Open the order and, if the panel is hidden, reveal the Downloadable product permissions panel through Screen Options.
Review the permissions for the exact downloadable line item before making a change. The panel allows an administrator to grant new downloads, revoke access or close the order. These controls apply to the selected order and downloadable item, not automatically to every customer who purchased the product.
WooCommerce normally grants permissions when the order reaches Processing or Completed, depending on the after-payment access setting and the order flow. Manual changes are therefore mainly useful for exceptions and support cases. Verify the order number, customer and line item before granting or revoking access so that the wrong purchase is not changed.
Download Delivery and File-Security Checks
Delivery method review
Access permissions and file delivery are related but separate concerns. WooCommerce describes Redirect only as insecure because anyone with the direct URL may access the file. Possession of that URL may therefore allow access to people who are not logged in or otherwise authorized.
Force downloads and X-Accel-Redirect/X-Sendfile are alternative delivery approaches, each with different server requirements. The appropriate choice depends on the hosting environment and its configuration. Do not treat one method as universally suitable without checking those requirements.
When reviewing an unexpected access problem, confirm which delivery method is active and whether the server supports the selected approach. A correct product permission setting does not remove delivery-method or hosting-related risks.
Protected file storage
Files uploaded through the WordPress Media Library are publicly accessible through their direct URLs. If a paid or confidential file should not be available through a public address, do not place it there while assuming that WooCommerce access rules will protect the URL.
WooCommerce recommends uploading protected downloadable files through the product editor into the WooCommerce uploads directory instead. Check the storage location as part of the product setup review, particularly when the file is intended for customers who have purchased access.
Troubleshooting Missing or Unexpected Downloads
A documentation-based diagnostic order
Use a consistent sequence rather than changing several settings at once. Start with the transaction and then move through product configuration, file history, permissions and delivery:
- Check payment and order status. Confirm that payment was registered and determine whether the order is Processing or Completed.
- Review the access setting. If access is expected during Processing, check whether Grant access to downloadable products after payment is enabled.
- Check product fields. Review Download limit and Download expiry, remembering that blank values mean unlimited downloads and no expiry respectively.
- Identify the file change. Determine whether an existing file row was edited or whether a new file was added.
- Review individual permissions. Open the exact order and line item, reveal the permissions panel if necessary, and verify whether access was granted, revoked or closed.
- Check delivery and storage. Review the delivery method, file location, hosting configuration and relevant customizations.
If an existing file was replaced, confirm that its links were updated while the previous expiry date and remaining count were preserved. If a new file was added, remember that past orders remain unchanged by default. Use a controlled account or staging order before applying changes that may affect customer purchases, and do not infer notification behavior from the link-update behavior.
Reliable WooCommerce download administration depends on separating product-level limits and expiry from order status, file-row updates, individual permissions and delivery security. The documented controls explain how access behaves, but appropriate policy values depend on the product, expected customer use and support process. When a link is missing or unexpectedly available, check the order state first, then the product fields, file history, permissions and delivery configuration. Explore our WordPress plugins, WooCommerce extensions, themes and membership plans to find the right tools for your website.