Fast user switching
Fast user switching lets you quickly switch between two or more logged-in accounts on the same device, without requiring you to re-authenticate.
How it works
A Tailscale client device allows only one active account to be logged in at a time. With fast user switching, a user on the client device can quickly switch to an account on another tailnet.
This will not require re-authentication unless one of the following is true:
- The account being switched to has never been used on the device.
- The device's node key for the tailnet being switched to has expired.
A device is not able to transmit packets on multiple tailnets simultaneously. When using fast user switching between tailnets, one tailnet doesn't have knowledge of the other tailnet's existence, nor whether the client device is also in another tailnet.
Note that the active Tailscale client account is independent of which account is used to log into the Tailscale admin console. You can have only one active account logged into the Tailscale client on a device, but if you have multiple browsers open, you can simultaneously use different accounts to log in to the admin console.
Adding an account to a device
You can add an account in either the client application (for macOS, iOS, and Windows) or using the Tailscale CLI (for Linux, macOS, and Windows).
Adding an account using the client application
- Tap on the profile picture at the top right of the screen to open the Settings view.
- Tap on the account details at the top of the screen to reveal the user switcher.
- Tap on Add another account.
- In the browser window that opens, log in with the desired account to complete the authentication process.
Adding an account using the CLI
-
Run the
tailscale logincommand:tailscale login -
Use the URL that is opened to specify the account that you want to use and complete the authentication process.
Switching between accounts
You can switch between accounts in either the client application (for macOS, iOS, and Windows) or using the Tailscale CLI (for Linux, macOS, and Windows).
This step assumes you have already added an additional account to the client device.
Switching between accounts using the client application
- Tap on the profile picture at the top right of the screen to open the Settings view.
- Tap on the account details at the top of the screen to reveal the user switcher.
- Tap on the account that you want to switch to.
You won't be asked to re-authenticate unless the device's node key for the tailnet being switched to has expired.
Switching between accounts using the CLI
Use the tailscale switch command to switch between accounts.
tailscale switch alice@example.com
You won't be asked to re-authenticate unless the device's node key for the tailnet being switched to has expired.
If you previously set a nickname for an account, use the nickname when you switch between accounts.
tailscale switch work
Viewing all accounts
You can view accounts that have authenticated with the device, using either the client application or the Tailscale CLI.
Viewing account using the client application
- Tap on the profile picture at the top right of the screen to open the Settings view.
- Tap on the account details at the top of the screen to reveal the user switcher.
The list of accounts will be displayed, with a checkmark indicating which account is currently logged in.
Viewing accounts using the CLI
Run the tailscale switch command with the --list flag:
tailscale switch --list
The list of accounts will be displayed, with an asterisk indicating which account is currently logged in.
alice@example.com
alice@gmail.com *
If you set a nickname for an account, the tailscale switch --list command displays the
nickname:
alice@example.com
work *
Setting a nickname
Use the tailscale set command to set a nickname for the currently active account.
Before setting the nickname in this example, let's assume that tailscale switch --list shows the
active account is alice@example.com.
tailscale switch --list
The output is:
alice@example.com *
alice@gmail.com
Set the nickname of the active account to work:
tailscale set --nickname=work
Run tailscale switch --list again, and see the nickname work appear in the output (instead of
alice@example.com):
alice@gmail.com
work *
Logging out of an account
You can log out of an account using either the client application or the Tailscale CLI.
Logging out using the client application
- Tap on the profile picture at the top right of the screen to open the Settings view.
- Tap on the account details at the top of the screen to reveal the user switcher.
- Tap Log out.
Logging out using the CLI
Run the tailscale logout command to log out the currently active account:
tailscale logout
Limitations
- You aren't prevented from switching between accounts in the same tailnet. If you don't want to switch between accounts in the same tailnet, re-authenticate the device instead of switching between accounts.