Tailnet names and types

A Tailscale network (known as a tailnet) contains different types of names used to identify and connect everything within it. Each type of name serves a specific purpose, establishes the network's identity and namespace, device names identify individual nodes within it, MagicDNS names make those devices reachable, and access permissions and user identities define who or what can access specific resources.

There are three primary types of names:

• Tailnet DNS name: The fully qualified domain (FQDN) that is used for name resolution throughout your tailnet.
• Machine name: The name of a device or node in your tailnet.
• Tailnet ID: The string used with the Tailscale API.

Tailnet DNS name

When you create a new tailnet, Tailscale assigns it a DNS name with the format tail<ID>.ts.net, where <ID> is a randomly generated hexadecimal string such as tailnet-fe8c.ts.net.

This serves several important purposes, including enabling MagicDNS to register DNS names for tailnet devices and serving as the fully qualified domain name for HTTPS certificates. It's also used by the sharing feature to uniquely identify shared tailnet devices. You can view your tailnet DNS name in the DNS page of the admin console.

Generate a new tailnet DNS name

You must be an Owner, Admin, or Network admin to generate and select a new tailnet DNS name.

If you want to use a tailnet DNS name that's more memorable than the generated hexadecimal string (tail<ID>.ts.net), you can generate and choose from a selection randomized name options. This can make it easier to remember or type your tailnet DNS name when using features like MagicDNS. For example, cat-crocodile.ts.net. These options are randomly generated, and you can always revert this name back to the originally assigned hexadecimal string name.

To generate a new name:

1. Open the DNS page of the admin console.
2. Select Rename tailnet.
3. Confirm that you want to used the randomized name.
4. Select one of the randomly generated tailnet names. If you don't want any of the proposed names, you can select Re-roll options to generate more options.
5. Select Rename tailnet.

When you select a random tailnet DNS name, it becomes your active tailnet name. If you previously used your default tailnet DNS name for MagicDNS, HTTPS certificates, or sharing, existing links to devices in your tailnet might break. This also applies when you revert back to the originally assigned tailnet DNS name.

Revert to the original tailnet DNS name

To revert back to the default tailnet DNS name:

1. Open the DNS page of the admin console.
2. Select Rename tailnet.
3. Confirm that you want to switch your tailnet name.
4. Select the name that you want to use.
5. Select Rename tailnet.

Because MagicDNS, HTTPS certificates, and sharing rely on the tailnet DNS name, switching your tailnet DNS name may break existing links to devices in your tailnet.

Machine names

Machine names are unique to each device in your tailnet. They're generated from the device's hostname (from the operating system) when the device joins the tailnet, and you can change a devices machine name from the admin console or the Tailscale CLI. The list of machines in your tailnet is located in the Machines page of the admin console.

Tailnet ID

The Tailnet ID is a string assigned to a tailnet and used by the Tailscale API. It's located in the General page of the admin console.

Display name

When you create a tailnet, it displays the private domain or public email address in the Tailscale authentication page, admin console page header, client UI, and the client CLI. For example, example.com, example@gmail.com, or user.github. Setting a custom display name gives your tailnet a recognizable name, making it easier for team members to identify which environment they are authenticating to, joining, or are currently using.

You must be an Owner or Admin to set or edit the tailnet display name.

1. Open the General page of the admin console.
2. Enter the display name. Use letters, numbers, spaces, apostrophes, and hyphens.
3. Select Save.

The display name will appear anywhere your tailnet domain or email address typically displays

Legacy ID

The Legacy ID field is automatically assigned when creating a new tailnet and displays in the General page of the admin console. If you used a custom domain, it displays as the domain name such as example.com. If it's an email using a public/shared domain, the email address displays such as user@gmail.com. This name displays in the admin console header, the tailnet login page, and in the Tailscale client and provides an indicator of the tailnet you are using. Once created, you cannot change this name.