Protecting private files in Drupal 8

Submitted by Darren Oh on Thu, 02/04/2016 - 14:32

If you add a private files directory after installing Drupal 8.0.3, you will get a warning on the status page saying it is not fully protected and to see for information about how to protect it with an .htaccess file. The message shows up even if the directory is not Web-accessible. Ignore it. The .htaccess file will be created automatically after caches are rebuilt.