I would like to ensure that only those who supply a password are able to download my file.
I did make the post password protect and then used the download id shortcode to embed the download on a page. See here
Trouble is, the link/ button says the download is "Protected" but, if you click on the link, the download starts without needing you to enter any password.
What am I doing wrong?