Prevent public access to WordPress files and folders. Protect downloads from public access, Role-based folder access, and User base folder access.
Embed forms in your pages and posts that accept an email address in exchange for a file download.