Documentation
Log InRequest Live Demo

    Recording Encryption

    Learn how to encrypt your call recordings and store them safely.

    The Recordings Encryption feature allows you to encrypt your call recordings, store them safely, ensuring that no one except you will access the recordings, and decrypt them whenever you need them, using a previously created key.

    ❗️

    IMPORTANT

    We strongly advise that while making encryption settings, you attentively read all the warnings and notifications that you see and follow them thoroughly. Otherwise, you may fail to decrypt your recordings.

    The first thing you need to do to be able to use encryption is to add a key.

    Adding an encryption key

    To start the process, go to Cloud PBX & Dialer > Recordings Encryption, and click ADD KEY PAIR FOR RECORDINGS ENCRYPTION, and fill in the fields in the window that pops up.

    Screenshot of the Cloud PBX & Dialer menu tabs

    Cloud PBX & Dialer menu tabs

    You need to take two steps: create an encryption key pair and set the passphrase.

    Step 1 - encryption key pair creation

    ❗️

    IMPORTANT

    Store your private key in a safe place and be sure to remember the passphrase. If you lose your private key or passphrase, you won't be able to access your recordings anymore. If someone obtains access to your private key and passphrase, they will be able to decrypt your recordings.

    Choose one of the two options suggested at the top of the window:

    • Generate a private key in your browser
      The key will be created directly in your browser window.
      Proceed as follows:

    Describe the key

    Enter a description for your key. In your key list, it will be added in brackets next to your key ID.

    Create a passphrase

    Create a key passphrase according to requirements in the grey box on the right. Later, you will need the passphrase in order to use your private key to decrypt your recordings.

    Confirm the passphrase

    Confirm the passphrase.

    Generate the key

    Click GENERATE KEY.

    Download the key

    You will see the generated key in the field below. Download it to be able to decrypt your recordings.

    • Upload your own pre-generated private key RSA-4096
      You need to prepare a private RSA-4096 key in advance.
      To upload your own key:

    Paste your key

    Paste your key into the suggested box.

    Enter the passphrase

    Optionally, enter the key passphrase.

    Verify the key

    Click VERIFY KEY.

    Check the result

    If the key has been verified successfully, you will see the relevant message.

    Step 2 - setting the passphrase

    You should choose if you want your passphrase to be saved on CommPeak's secure servers.

    If you do, your recordings will be decrypted automatically once you try to play them in CommPeak systems. Otherwise, if you don't save the passphrase, you must enter it each time you play your recording.

    Choose passphrase saving

    Switch the toggle to enable passphrase saving, or leave it off if you prefer not to save the passphrase.

    Enter your password

    To confirm your settings, enter the password you use when logging in to your CommPeak account in the field below.

    Add the encryption key

    Click ADD ENCRYPTION KEY.

    Activating the encryption key

    After you have created a new key, it will be added to the list of your keys, but not activated yet. By default, the toggle in the Activated column is in the OFF position for new keys.

    To activate the key:

    Activate the key

    Click the toggle in the Activated column.

    Confirm the activation

    Read the pop-up message and click ACTIVATE KEY if you want to proceed with the activation.

    The toggle will move to the ON position.

    Check the global toggle

    Ensure that the toggle at the top of the page that refers to all the keys is ON.

    Choose the encryption mode

    Select how you want the encryption to act in PBX Stats and the Dialer in Decryption Settings below the table: whether the passphrase must be entered each time you want to decrypt a recording, or it will be auto-filled.

    📘

    NOTE​

    Option 2 ( passphrase automatically applied at decryption) is valid only for the keys for which you have chosen to save the passphrase on CommPeak's secure servers when creating the key.

    Save the settings

    Click SAVE.

    Confirm with your password

    In the confirmation window that pops up, enter your CommPeak account's password and then click SAVE SETTINGS.

    The new key you have saved and activated will work for your future recordings.

    Encryption settings

    Once you activate the recording encryption, at the bottom of the Recordings Encryption page, you will find additional encryption settings. Here you can choose to allow CommPeak to create additional keys for various purposes.

    By default, the settings are deactivated. Please read the explanations attentively before changing the settings.

    After changing the settings, click SAVE.

    Updated 4 days ago

    Did this page help you?