# Voice Recording settings

Twilio can record calls and Conferences that you create with Programmable Voice. You start a recording with the [`<Record>`](/docs/voice/twiml/record) or [`<Dial record>`](/docs/voice/twiml/dial#record) TwiML verbs, the `Record` parameter on the [Calls resource](/docs/voice/api/call-resource) or [Conferences resource](/docs/voice/api/conference-resource), or by creating a [Recording resource](/docs/voice/api/recording) directly. By default, Twilio stores the resulting Recording in encrypted cloud storage and you retrieve it through the [Recording resource](/docs/voice/api/recording).

On the **Voice Recording settings** page, you can configure the following account-wide settings for Voice Recordings:

* [Voice Recording external storage](#voice-recording-external-storage) sends new Voice Recordings to an external AWS S3 bucket instead of Twilio's cloud storage.
* [Voice Recording encryption](#voice-recording-encryption) encrypts new Voice Recordings with a public key that you provide.
* [Dual-channel Recording for Conference](#dual-channel-recording-for-conference) records Conferences in dual-channel format by default.

Changes affect all new Recordings created after you save your settings. Existing Recordings don't change.

## Voice Recording external storage

With Voice Recording external storage, Twilio uploads new Voice Recordings to an AWS S3 bucket that you own instead of storing them in Twilio's cloud. Turning on this setting activates external storage for all regions, but you configure the bucket and AWS credentials for each region separately.

Before you begin, make sure you have:

* An AWS S3 bucket that Twilio can write to.
* An AWS IAM user with permission to write objects to that bucket. You'll need the IAM user's access key ID and secret access key.

### Turn on Voice Recording external storage

After you configure external storage and save your settings, Twilio uploads all new Voice Recordings to your S3 bucket and doesn't retain a copy in Twilio's cloud storage.

## Twilio Console

1. In [Twilio Console](https://1console.twilio.com), go to **Voice** > **Recordings** > **Settings**.
2. In the **Voice Recording external storage** section, select **Enable**.
3. For **Select AWS credentials**, choose an existing AWS credential, or select **Create a new AWS credential** and provide a friendly name, the IAM user's access key ID, and the IAM user's secret access key.
4. For **External S3 Bucket URL**, enter the URL of your S3 bucket.
5. Select **Save**.

## Legacy Console

1. In the [legacy Console](https://console.twilio.com/us1/develop/voice/settings/general), open the **Voice Settings** page.
2. Find the **External S3 Storage** section and turn on the toggle.
3. Select an existing AWS credential, or create a new one and provide a friendly name, access key ID, and secret access key.
4. Enter the URL of your S3 bucket.
5. Save your settings.

## Voice Recording encryption

> \[!NOTE]
>
> Voice Recording Encryption is available to Twilio Enterprise Edition and Twilio Security Edition customers. Learn more about [Editions](https://www.twilio.com/en-us/editions).

Voice Recording Encryption encrypts new Voice Recordings with a public key that you provide. Only you, the holder of the corresponding private key, can decrypt the Recordings.

For details on how encryption works, how to generate a key pair, and how to decrypt your Recordings, see the [Voice Recording Encryption](/docs/voice/tutorials/voice-recording-encryption) tutorial.

> \[!WARNING]
>
> After you activate Voice Recording Encryption, only **you** can decrypt the Recordings. No one at Twilio, including Twilio support, can decrypt your Recordings. Only test this feature on **test** accounts with non-production Recordings.

### Turn on Voice Recording encryption

After encryption is on, Twilio encrypts new Voice Recordings with the public key that you select. Before you begin, [generate an RSA key pair and create a Twilio Public Key resource](/docs/voice/tutorials/voice-recording-encryption#configuring-voice-recording-encryption) that contains your public key.

## Twilio Console

1. In [Twilio Console](https://1console.twilio.com), go to **Voice** > **Recordings** > **Settings**.
2. In the **Voice Recording encryption** section, select **Enable**.
3. For **Select a public key**, choose the public key to use for encryption, or select **Create new public key** and provide a friendly name and the contents of your public key in PEM format.
4. Select **Save**.

## Legacy Console

1. In the [legacy Console](https://console.twilio.com/us1/develop/voice/settings/general), open the **Voice Settings** page.
2. Find the **Voice Recording Encryption** section and turn on the toggle.
3. Select the public key you uploaded earlier.
4. Save your settings.

## Dual-channel Recording for Conference

Dual-channel Recording for Conference records new Conference Recordings in dual-channel format by default. The first channel contains the audio of the first Participant that joined the Conference. The second channel contains all other audio from the call. Read the [Dual-channel Conference Recordings Changelog entry](https://www.twilio.com/en-us/changelog/dual-channel-conference-recordings-as-default-is-now-ga) to understand the implications of turning on this setting.

### Turn on Dual-channel Recording for Conference

After you turn on this setting, new Conference Recordings are saved in dual-channel format by default. Existing Recordings and non-Conference Recordings aren't affected.

## Twilio Console

1. In [Twilio Console](https://1console.twilio.com), go to **Voice** > **Recordings** > **Settings**.
2. In the **Dual-channel Recording for Conference** section, select **Enable**.
3. Select **Save**.

## Legacy Console

1. In the [legacy Console](https://console.twilio.com/us1/develop/voice/settings/general), open the **Voice Settings** page.
2. Turn on the **Dual-channel Recording for Conference** toggle.
3. Save your settings.

To retrieve a dual-channel Recording, include the `RequestedChannels=2` query parameter on your request to the [Recording resource](/docs/voice/api/recording#download-dual-channel-media-file).

## Related resources

* [Recording resource](/docs/voice/api/recording)
* [Voice Recording Encryption tutorial](/docs/voice/tutorials/voice-recording-encryption)
* [CredentialPublicKey resource](/docs/iam/credentialpublickey-resource)
* [Turn on dual-channel recording for Flex](/docs/flex/developer/insights/enable-dual-channel-recordings)
* [TwiML `<Record>`](/docs/voice/twiml/record)
* [TwiML `<Dial>` recording attributes](/docs/voice/twiml/dial#record)
* [TwiML `<Conference>` recording attributes](/docs/voice/twiml/conference)
