Contact preferences

When issues that affect your tailnet are discovered, and we have your contact information, we will contact you. For example, if a security issue affects your tailnet and we have a security contact email for you, we will send you an email.

You can add, view, and update your account changes, configuration issues, and security issues contacts in the Contact preferences page of the admin console, if you have a user role that is permitted access. For information about updating your billing contact, see Billing email.

The account changes, configuration issues, security issues, and billing emails cannot be disabled or unsubscribed from. They are for notifications about transactional events—they are not marketing emails.

Types of contact emails

The types of contact emails are for account changes, configuration issues, security issues, and billing. A billing email is not enabled unless you're on a paid Tailscale plan.

If no email is set for a contact type, Tailscale uses the default behavior, which is to send emails to the tailnet owner email address.

Account changes email

The account changes email is used for notifications about changes to your account. For example, approvals for access to new features requests, or changes to rate limits.

Configuration issues email

The configuration issues email is used for notifications if there is an issue with your tailnet configuration. For example, you have a tailnet policy file misconfiguration.

Security issues email

The security issues email is used for notifications about security issues affecting your tailnet. For example, if we need to email a security bulletin for an issue that affects you.

Billing email

The billing email is used by Stripe to send you invoices and other billing-related email. If you are not paying for a paid Tailscale plan, a billing email does not exist for your tailnet.

Setting the account changes email

You need to be an Owner, Admin, or IT admin of a tailnet in order to update the account email.

1. Open the Contact Preferences page in the admin console.

2. In the Account changes text box, enter an email address.

3. Click Save.

   A verification URL will be emailed to the new email address.

4. Follow the verification URL to confirm the email address. If the email address is not verified, Tailscale sends any new account changes emails to the last verified account email (or the tailnet owner email if there is no previously verified account changes email).

Once the email address is verified, future account changes emails will be sent to the email address that you provided.

Setting the configuration issues email

You need to be an Owner, Admin, or IT admin of a tailnet in order to update the support email.

1. Open the Contact Preferences page in the admin console.

2. In the Configuration issues text box, enter an email address.

3. Click Save.

   A verification URL will be emailed to the new email address.

4. Follow the verification URL to confirm the email address. If the email address is not verified, Tailscale sends any new configuration issues emails to the last verified configuration issues email (or the tailnet owner email if there is no previously verified configuration issues email).

Once the email address is verified, future support issue emails will be sent to the email address that you provided.

Setting the security issues email

You need to be an Owner or Admin of a tailnet in order to update the security email.

1. Open the Contact Preferences page in the admin console.

2. In the Security issues text box, enter an email address.

3. Click Save.

   A verification URL will be emailed to the new email address.

4. Follow the verification URL to confirm the email address. If the email address is not verified, Tailscale sends any new security issue emails to the last verified security issues email (or the tailnet owner email if there is no previously verified security issues email).

Once the email address is verified, future security issue emails will be sent to the email address that you provided.

Setting the billing email

For information about updating your billing contact preference, see Billing email.

Audit logging of contact preference updates and verification

In configuration audit logging, an action will be recorded in your audit log whenever a contact preference is updated and whenever a contact preference is verified. The log entry will show who performed the action and when the action occurred. For a contact preference update, the log entry will also show both the new value and old value for the email address.

Limitations

• While the account changes, configuration issues, security issues, and billing contacts can differ, each of them can have only one email. If you want multiple users to be notified, consider using an email group. For example, use security@example.com, instead of alice@example.com, for security issue notifications.
• The account changes, configuration issues, and security issues emails cannot be disabled or unsubscribed from. Since these are transactional emails, they will always be sent, even if you have unsubscribed from marketing emails. Similarly, if you are paying by invoice, you cannot disable or unsubscribe from billing notifications.