Docs › FAQ Can Tailscale decrypt my traffic? No. Devices running Tailscale only exchange their public keys. Private keys never leave the device. All traffic is end-to-end encrypted, always.