The customer pays, but the file doesn’t arrive. Or it arrives via a public link that anyone can share: two problems that undermine sales and trust.
To sell digital products using WooCommerce, you need to link your product catalogue, payment methods and access to files as part of a reliable process. The platform provides the basic tools, but hosting and configuration make all the difference.
Let’s start with the settings that allow you to deliver purchased content without leaving the downloads exposed.
Selling digital products with WooCommerce: what you need to prepare
WooCommerce handles downloadable products directly within the WordPress shop. If you’re considering the platform, my A Guide to WooCommerce for Entrepreneurs explains the requirements and options.
Choose content that is clearly useful
PDFs, e-books, Excel templates, photographs, audio files and ZIP archives are all suitable for sale via download. Before uploading, specify what the customer will receive and how they can use it.
Specify the format, dimensions, required software and licence terms. A Microsoft Excel template must state its intended compatibility. A photo archive must clarify the permitted uses.
If you offer courses with private lessons, progression tracking and assessments, you should consider an integrated learning platform. A downloadable file cannot manage these functions on its own.
Calculate the project costs
The basic version of WooCommerce is free. However, the online shop still requires hosting, a domain name, configuration, maintenance and any necessary extensions.
Also take into account payment fees, customer support and content updates. The margin depends on net revenue, not just the listed price.
Draw up a detailed product description: contents of the pack, expected results, preview and delivery methods. This will help reduce mistaken purchases and avoidable enquiries.
Set up the downloadable product correctly
Configuration begins on the product page. The Official WooCommerce product settings They also include the management of authorised download folders.
Set the ‘Virtual’ and ‘Downloadable’ options
Open Products > Add new and choose the right type of product. To make selling easy, you can start with a simple product.
If the content does not require posting, select “Virtual”. To deliver a file, select “Downloadable”. These are two separate options: a service can be virtual without involving a download.
On the General tab, enter the price, file name and content path. Use names that the customer will understand. Avoid internal titles such as “final_version_3”.
Upload the files via the workflow designed for downloadable products. Then check the actual destination on the server.
Set limits and a deadline before the sale
The download limit determines how many downloads are permitted. If you leave the field blank, the number is unlimited.
The expiry date indicates the number of days the item is available after purchase. A blank field means there is no expiry date.
Choose terms that are appropriate for the product and state them in the product description. A restriction that is too strict may penalise those who change computers or interrupt the download.
WooCommerce does not impose a universal maximum file size. However, your hosting provider, PHP configuration and server may impose limits. For videos and large files, please check before uploading and delivering.
Protecting your downloads: choose the right method
In WooCommerce > Settings > Products > Downloadable products Find the delivery method. It is a technical choice that affects security and performance.
The WooCommerce download documentation distinguishes between these methods.
| Method | How to submit the file | What to check |
|---|---|---|
| Go on, download it | The file is processed by PHP. | Time-outs may occur with large files and underpowered servers. |
| X-Accel-Redirect / X-Sendfile | Delivery is handled by the web server. | Support and configuration of NGINX or Apache. |
| Redirect only | The customer goes directly to the file’s location. | The address can also be used without making a purchase. |
For paid content, avoid Redirect only when the file remains publicly accessible. WooCommerce considers this method to be insecure.
Forza Download requires a compatible PHP configuration, including the option allow_url_fopen. For large files, it may be preferable to let the server handle the delivery.
X-Accel-Redirect is used with NGINX. X-Sendfile requires the appropriate support on Apache. Ask your hosting provider to confirm the configuration; do not enable the option blindly.
A controlled download link loses its purpose if the original file remains publicly accessible.
Customer access and files: two separate checks
The delivery method must work in conjunction with the order permissions and file protection on the server. Check both.
Decide when to allow the download
WooCommerce allows you to grant access after payment via a dedicated setting. Check how order statuses work with the payment gateway you are using.
A received order does not always mean that payment has been confirmed. With a bank transfer, for example, you need to check that the payment has been received before authorising delivery.
The “Downloads require login” option requires the customer to log in. To use it correctly, you must disable guest purchases.
The account makes it easier to retrieve your purchases, but adds an extra step. Consider the whole process, especially when using a smartphone.
Check folder permissions
WooCommerce uses a file .htaccess in the folder wp-content/uploads/woocommerce_uploads. This does not guarantee protection on every server configuration.
NGINX requires specific rules. On Apache, too, you need to check that the directives are being applied.
Adding a unique string to file names is recommended and enabled by default. It makes paths less predictable, but does not replace server-side checks.
There is no setting that completely prevents the redistribution of a file that has already been downloaded. For sensitive content, consider licences and document customisation.
Payments and emails must be completed for delivery to take place
To sell digital products using WooCommerce, the payment gateway must update the order and trigger the correct workflow. A payment gateway installed without being tested leaves too much room for error.
Stripe, WooPayments and PayPal are solutions that should be assessed on the basis of target audience, fees, customer support and dispute resolution. There is no need to activate every available payment method.
Protect your API credentials. Do not expose them in publicly accessible code, and do not collect card details outside the provider’s designated workflows.
Customers should look for the downloads in their order confirmations and, where applicable, in their personal account area. The WooCommerce general settings They also include email configuration.
Check the sender, the delivery details and that the message is clear. Avoid attaching large files: the link provided by the shop is easier to manage.
In the event of a refund, please also check any remaining permits. Revoking future access does not delete the file already saved by the customer.
Testing and maintenance before going live
An advertising campaign can generate orders quickly. If the download doesn’t work, it generates support enquiries just as quickly.
Before the launch, carry out a full purchase in test mode. Check at least the following steps:
- Shop via your computer and smartphone, whilst also checking for declined payments.
- Please confirm that the order status and download authorisation will be updated once payment has been received.
- Email trial, customer portal, expiry date and download limit.
- Open the original file path in an incognito session and check that unauthorised access is blocked.
Check again after major updates. A change to your hosting, cache or plugins may affect how content is delivered.
The WordPress site maintenance It must include updates, restorable backups and proof of purchase.
Exclude dynamic pages from the cache in accordance with the configuration settings. The shopping basket, checkout and personal account area must not display other users’ information.
If you encounter a download error, first check the path, permissions and technical logs. Installing another plugin without first diagnosing the problem may complicate matters.
VAT, invoicing and terms and conditions of sale
Automated delivery must also be consistent with the administrative process. Selling digital products via WooCommerce requires checks that go beyond the ‘Buy’ button.
Align the checkout process with tax documents
WooCommerce processes the order. Where electronic invoicing is required, an integration is needed to generate the XML file, send it to the SdI and manage the receipts.
The courtesy PDF does not replace the tax document that has been sent. The checkout, tax rates, management system and order status must all show consistent data.
Discuss the treatment of the content and the correct time of issue with your accountant. Do not automatically apply the same rate to all digital products.
For European sales, check whether the European OSS VAT scheme. Private customers, businesses and different countries may require different configurations.
Publish clear terms and conditions
Explain the file’s availability, support, included updates and permitted uses. The customer must be aware of the terms and conditions before paying.
Your Europe summarises the right of withdrawal for online purchases, which is generally expected within 14 days. For digital content, check the applicable rules and the correct procedure with a professional.
Avoid using generic phrases such as “no refunds” without a legal assessment. Protecting downloads and respecting customers’ rights are two responsibilities that must be managed in tandem.
Frequently Asked Questions about WooCommerce downloads
Do you need a plugin to sell a PDF?
WooCommerce includes support for downloadable products. For a PDF sold individually, you can use the built-in features. Additional extensions are required when the project calls for extra functionality, such as document customisation, licences or administrative integrations.
Can I completely prevent file sharing?
You can control access to downloads, require users to log in and set limits. You cannot completely prevent a file that has already been downloaded from being copied. Technical protection measures must be accompanied by clear terms of use and measures proportionate to the content.
An online shop ready to deliver
A digital product must reach the customer via a verified route: payment, authorisation and download. Hosting and maintenance ensure that this process remains reliable over time.
In my report on development of e-commerce websites I’ll also design these sections, along with the catalogue, checkout and SEO optimisation.
Do you want to sell your content online? Start with a shop that protects your files and makes buying easy.
