Objective
This article helps you turn on HTTP Basic Authentication for media stored at Twilio, so that recordings and other media files on your account cannot be reached by anyone who simply has the media URL.
Product
Programmable Voice
Environment
Twilio Console
User Account Permission/Role(s) Required
Update access to Voice settings is required to change this setting. Without it the radio buttons are read-only and the Save button is not shown.
Procedure
- In the Twilio Console, select Communications in the left sidebar.
- Select Voice, then Settings.
- On the General tab, select Privacy & Security in the settings navigation.
- Read the banner at the top of the page. When the setting is currently off, it warns: "Once enabled, HTTP basic authentication cannot be disabled without contacting support."
- Under HTTP Basic authentication for media access, select Enable (Recommended). The help text confirms: "Media is protected from public access and HTTP Basic Authentication is required to access media urls."
- Select Save. A confirmation message reads "Voice general settings have been updated successfully."
Additional Information
- This is a one-way change from the Console. Once HTTP Basic Authentication is enabled, the radio buttons become read-only and the banner reads "To disable HTTP basic authentication, contact support.", you must contact Twilio Support to turn it back off.
- With the setting enabled, every request for Voice and Messaging media files — such as recordings and message images, must supply your Account SID and Auth Token, or an API key.
- The setting applies to Messaging media as well as Voice media.
- Select Learn more in the section description for Twilio's guidance on preventing unauthorized access to Programmable Voice media.
- Voice settings are also reachable from Settings in the left sidebar, under Product settings › Voice.
This content was generated by AI and reviewed, edited, and verified by a human.