Purchase Generates a New Password

[lat9]

Is there a way to set a timelimit on expiration? Like say allow access by a specific customer to a url for a month?

Look in your admin's Configuration->Attribute Settings. From there, you can specify the number of days a download is valid and how many times the customer can access it. In your case, it sounds like you'd want to specify 30 days and unlimited downloads.