en	Create a Secure Downloads File Storage: If enabled, a secure downloads file storage is created and automatically added to your system. Also, an .htaccess file will be put into that directory. If you are using an nginx web server, you have to deny the access to this path manually. Please note, that this configuration will be set to true by default in upcoming versions.

en	Check Direct File Access: This is only a vestigial, basic check and its result may be wrong.

en	Checks directories matching the pattern.

en	Directory Pattern: What directories shall be protected? Multiple directory patterns can be separated by a pipe (|).

en	File Type Pattern: What file types (read: extensions) shall be protected? Multiple file extension patterns can be separated by a pipe (|). You can use an asterisk (*) if you want to protect all files within configured directories.

en	Enable Group Check: Allows forwarding a secure download link to others, who can access that file if they have at least one front-end user group in common. Enabling this makes the checks LESS restrictive!

en	Group Check Directories: A list of directories for the less restrictive group check, separated by a pipe (|). Leave empty if you want to enable the group check for all directories.

en	Exclude Groups: A comma separated list of groups that are excluded from the group check feature (if enabled).

en	Strict Group Check: If enabled, files are only delivered if the user groups exactly match those of the secured link.

en	Link Prefix: Prefix for generated links (the "securedl" part in "https://example.com/securedl/sdl-[JWT]/image.png").

en	Token Prefix: Prefix for generated token (the "sdl-" part in "https://example.com/securedl/sdl-[JWT]/image.png").

en	Additional Link Timeout: The secure link is only valid for a limited time, which is calculated from the cache time that is used for the page that carries the link plus this value (in seconds). Default is 3600 sec (= 1 h).

en	Document Root: Do only change this configuration option, if your TYPO3 instance is running in a subfolder or you are using a SSL reverse proxy to map TYPO3 into a virtual subfolder. This configuration must start and end with a slash (e.g. "/proxy-typo3/").

en	Force Download: Force Download of specified file types.

en	Force Download Type: A list of file types that should not be opened inline in a browser, separated by a pipe. Only used if "forcedownload" is true. You can use an asterisk (*) if you want to force download for all file types.

en	Output Function: PHP function which is used to deliver the secured files.

en	Protected Path: Path to protected storage for nginx x-accel-redirect delivery method.

en	Allow Access For Not Logged In Users: If this option is activated, valid links are generated for users who are not logged in. If this option is deactivated, unregistered users (user ID = 0) will not be able to access secured files.

en	Log Module: Log each file access. This option will enable a backend module.

en	Extension Configuration: If this option is activated, the checkConfiguration step in backend module extension configuration is skipped. This should be avoided, but comes in handy if there is a lot of folders as this could create long waits before the module is loaded.