Download Sources

Download Sources connects remote files to Magento downloadable products. Select files in the product form instead of downloading and uploading each one manually. Your store keeps a local copy and checks the source for updates through Magento cron.

File sources supported by Download Sources

• SFTP / SSH: Connect with a password or private key. The first connection test pins the host key.
• FTP and FTPS: Connect to FTP servers or use explicit or implicit TLS with FTPS.
• Google Drive: Access folders and shared drives through a service account.
• Amazon S3: Use Amazon S3 or S3-compatible storage.
• GitHub releases: Access public, private, and GitHub Enterprise repositories. A latest-release entry follows new releases.

Each source has its own form with Test Connection. Test the values currently entered in the form before saving them.

Choose files from the product form

Browse folders, filter by name, and select several files at once. The browser marks files already used in a product link.

• Add Links from Download Source: Create one link for each selected file.
• Choose from Download Source: Replace the file on an existing link.

For ZIP files with a version in composer.json, link titles follow the format Product name — Version 1.2.0. Other files use their file names as titles.

Keep downloads and package versions current

Magento cron checks linked files at their source. When a file changes, the module replaces the local copy under the same name, so existing links and earlier orders receive the updated file.

For a new Composer package version, the module adds a new link alongside the earlier version so each version stays installable. You can choose to replace the earlier version instead.

The Linked Files grid shows each file's source, package, version, status, and last check. Use it to check files now, turn updates on or off, and remove unused copies. Command-line commands also let you list, test, and browse sources and run update checks.

Use files with Techimprovement Licensing

Selected files remain ordinary Magento link files. Techimprovement Licensing can serve them to licensed customers through its private Composer repository, including new versions as soon as the module copies them.

Protect credentials and limit file access

The module encrypts passwords, keys, and tokens with the store's encryption key and never sends them back to the browser. The file browser stays within the folder you configure. Allowed file types and a size limit apply, and the module never copies PHP files or .htaccess files.

Compatibility and requirements

The module runs only in the admin and adds nothing to the storefront. It works with Luma, Luma-based, and Hyvä themes. Customers access files through Magento's own download links or the Techimprovement Licensing Composer repository.

• Platform: Magento Open Source or Adobe Commerce 2.4.7, 2.4.8, or 2.4.9.
• PHP: Versions 8.2–8.5 with the curl, openssl, json, and zip extensions.
• Composer packages: phpseclib/phpseclib 3 and guzzlehttp/guzzle 7, both shipped with Magento.
• Scheduled updates: Magento cron for update checks.
• Network access: The store must reach your SFTP/FTP server, Google Drive, S3, or GitHub source.

Choose your edition and download

Select Community, Enterprise, or Magento Cloud. This digital product includes the Version 1.0.1 download.