Get started
© 2024

Tailscale quickstart

Welcome! Follow the steps below to create your own private Tailscale network (known as a tailnet), or watch the video to learn how to get started with Tailscale and set up some useful features.

Create a tailnet

  1. Go to and select Get Started. Alternatively, you can download and install the Tailscale client on your device, then sign up.

  2. Log in using a supported single sign-on (SSO) identity provider account.

  3. On the Welcome to Tailscale page, select how you will use your tailnet:

    • At work enrolls you in the Enterprise plan for a 14-day trial.
    • At home enrolls you in the Personal plan and entitles you to three free users.

    You can always change your plan. For details, refer to Modify billing information.

  4. On the Let's add your first device page, select the OS that corresponds to the device you are using to download and install the client. Authenticate the client using the same credentials that you used to create the tailnet, in step 3. After you are authenticated, you will see your device appear in the browser window.

  5. On the Next, add a second device page, select the OS for another machine to add to the tailnet. Copy the link and send it to the second device. After the second device is authenticated, both devices will display.

  6. Select Take me home. You will be redirected to the Tailscale admin console. This interface allows you to control most aspects of your tailnet including users, devices, DNS, permissions, authentication keys, and more.

Rename devices

Every device added to a tailnet, including servers, nodes, phones, and personal computers is assigned a unique name generated from the device's OS hostname. This name is displayed in the Machines page of the admin console. You can also rename a device to help you locate and organize devices in the Machines page list.

Use MagicDNS

MagicDNS makes communicating with devices across your tailnet easier by allowing you to use the name listed in the Machines page of the admin console instead of an IP address. This works using automatically assigned OS hostnames or renamed device names. MagicDNS is enabled by default, and we recommend you keep it enabled.

Invite users

There are two types of tailnet user invites.

Team member invites are for users who will authenticate using the same identity provider you used when creating the tailnet. This is the same domain displayed in the Organization field of the General page of the admin console.

External invites are for users who are not part of your custom domain, such as contractors, friends, and family.

Team members

If your tailnet uses a custom domain (, users with email addresses with the same domain can log in without needing an invite. Alternatively, you can send team member invites to notify them to join.

External users

To invite external users to a tailnet, open the Users page of the admin console, select Invite external users, and choose one of the following options:

  • Invite via email to send one or more invites.
  • Copy invite link to share the invite link with others.

When users select the link, they will be directed to the Tailscale login page, where they can authenticate using a supported single sign-on (SSO) identity provider account. Once they are authenticated, users are added on the Users page of the admin console.

For more details, see Invite any user to your tailnet.

Add devices

You can add more devices to your tailnet using one of the following methods:

Tailscale automatically assigns each device on your network a unique 100.x.y.z IP address, to establish stable connections between machines no matter where they are in the world, even when they switch networks or are behind a firewall.

To learn more about adding devices, see Add a device.

Secure traffic using exit nodes

Keep your internet activity private on an untrusted network by designating devices in your tailnet as exit nodes, then configure your tailnet devices to use those exit nodes. You can also integrate Mullvad VPN endpoints as your exit nodes.

To set up a device as an exit node in your tailnet, see Configure an exit node. To configure a device to use an exit node, see Use the exit node.

Route traffic using subnets

You can provide tailnet access to existing resources in your network using a subnet router. This can be useful if you need to access devices on which the Tailscale client cannot be installed, such as printers.

To set up a subnet in your tailnet, see Configure a subnet.

Manage permissions with ACLs

You can define your own custom permission for the users and devices in your tailnet, using access control lists (ACLs). These permissions are configured in the tailnet policy file, which is located on the Access Controls page of the admin console.

Monitor and log traffic

You can monitor and log tailnet activity such as network traffic, client activity, tailnet configuration changes, and SSH session recordings.

To learn more, see Logging, auditing, and streaming.

Use cases

Tailscale can be used for a wide variety of users and environments. This section provides guidance for some common scenarios that you may want to use in your tailnet.


IT admins

Personal users

  • Connect an Apple TV to your tailnet for viewing your media server files, use your Apple TV as an exit node to route traffic through your home internet connection when you're away, or choose an exit node to route your Apple TV's traffic through.
  • Receive files from a network attached storage (NAS) server using FTP, and view media files from players such as VLC, Plex, and Jellyfin.
  • Run a Pi-hole server for DNS-based ad blocking for your tailnet.
  • Share files between your own devices, even across operating systems, with Taildrop.
  • Host a private server for you and your peers to play Minecraft or chat on IRC.

Troubleshooting and support

Visit our Support page to view common questions and answers, file bugs, request new features, view Tailscale's operational status, or engage directly with our Support team.

Here are some links that provide assistance for common inquiries: