# Install tailscale Easiest, most secure way to use WireGuard and 2FA. Version 1.98.5 via Homebrew; verified 2026-06-02. ## Install ```sh sudo av install brew:tailscale ``` ## Agent safety answer tailscale controls private network connectivity and identity-bound device access. - **Credential access:** Reads auth state, device identity, and network configuration. - **Remote mutation:** Can change connectivity, serve routes, and expose local services. - **Publish/artifact risk:** Can make internal services reachable through a tailnet. - **Recommended control:** Gate up, serve, funnel, exit-node, and auth-key operations. - **Agent-use guidance:** Allow status checks; require approval before changing network exposure or authentication. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install tailscale ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install tailscale ``` Evidence: MacPorts ports tree: net/tailscale/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add tailscale ``` Evidence: Alpine Linux edge package indexes: tailscale from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install tailscale ``` Evidence: Fedora Rawhide package metadata: tailscale from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#tailscale ``` Evidence: nixpkgs package indexes: pkgs/by-name/ta/tailscale/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S tailscale ``` Evidence: Arch Linux sync databases: tailscale from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install tailscale ``` Evidence: openSUSE Tumbleweed package metadata: tailscale from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install tailscale ``` Evidence: Chocolatey community package catalog: tailscale from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','swissfileknife' - Scoop (92%): ```sh scoop install extras/tailscale ``` Evidence: Scoop official bucket manifest trees: bucket/tailscale.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Tailscale.Tailscale -e ``` Evidence: Windows Package Manager source index: Tailscale.Tailscale from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:tailscale - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 1.98.5 - **Source summary:** Easiest, most secure way to use WireGuard and 2FA - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** BSD-3-Clause - **Source archive:** - **Last updated:** 2026-06-02T00:45:52Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - tailscale (cli) - tailscaled (cli) - tailscale (alias) - tailscaled (alias) ## Build Dependencies - go ## Install Behavior - Post-install hook: not defined - Service: declared - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 1.98.5 - Package-manager updated: 2026-06-02 - Local data status: ok - Upstream repository: https://github.com/tailscale/tailscale - info: No cached GitHub release or tag data was available. ## Notes de sécurité formula declares a Homebrew service. - **Protected-tool coverage:** Plain Text Tailscale Node State - **Geiger risk:** orange / medium - formula declares a Homebrew service ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** tailscale - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Nix - tailscale: normalized package name match | nixpkgs package indexes: pkgs/by-name/ta/tailscale/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - tailscale - 1.96.5-r1: normalized package name match | Alpine Linux edge package indexes: tailscale from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The easiest, most secure way to use WireGuard and 2FA | https://tailscale.com/ - apk - tailscale-bash-completion - 1.96.5-r1: normalized package name match | Alpine Linux edge package indexes: tailscale-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Bash completions for tailscale | https://tailscale.com/ - apk - tailscale-doc - 1.96.5-r1: normalized package name match | Alpine Linux edge package indexes: tailscale-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The easiest, most secure way to use WireGuard and 2FA (documentation) | https://tailscale.com/ - apk - tailscale-fish-completion - 1.96.5-r1: normalized package name match | Alpine Linux edge package indexes: tailscale-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fish completions for tailscale | https://tailscale.com/ - apk - tailscale-openrc - 1.96.5-r1: normalized package name match | Alpine Linux edge package indexes: tailscale-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The easiest, most secure way to use WireGuard and 2FA (OpenRC init scripts) | https://tailscale.com/ - apk - tailscale-systemd - 1.96.5-r1: normalized package name match | Alpine Linux edge package indexes: tailscale-systemd from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The easiest, most secure way to use WireGuard and 2FA (systemd files) | https://tailscale.com/ - apk - tailscale-zsh-completion - 1.96.5-r1: normalized package name match | Alpine Linux edge package indexes: tailscale-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Zsh completions for tailscale | https://tailscale.com/ - dnf - tailscale - 1.94.2-1.fc45: normalized package name match | Fedora Rawhide package metadata: tailscale from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | The easiest, most secure way to use WireGuard and 2FA | https://github.com/tailscale/tailscale - pacman - tailscale - 1.98.2-1: normalized package name match | Arch Linux sync databases: tailscale from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A mesh VPN that makes it easy to connect your devices, wherever they are. | https://tailscale.com - zypper - tailscale - 1.96.4-1.2: normalized package name match | openSUSE Tumbleweed package metadata: tailscale from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | The easiest, most secure way to use WireGuard and 2FA | https://github.com/tailscale/tailscale - zypper - tailscale-bash-completion - 1.96.4-1.2: normalized package name match | openSUSE Tumbleweed package metadata: tailscale-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Tailscale bash completion | https://github.com/tailscale/tailscale - zypper - tailscale-fish-completion - 1.96.4-1.2: normalized package name match | openSUSE Tumbleweed package metadata: tailscale-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Tailscale fish completion | https://github.com/tailscale/tailscale - zypper - tailscale-zsh-completion - 1.96.4-1.2: normalized package name match | openSUSE Tumbleweed package metadata: tailscale-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Tailsacle zsh completion | https://github.com/tailscale/tailscale - MacPorts - tailscale: normalized package name match | MacPorts ports tree: net/tailscale/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Chocolatey - tailscale: normalized package name match | Chocolatey community package catalog: tailscale from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','swissfileknife' ## Related Links - [Secret-risk packages](https://www.automicvault.com/fr/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/fr/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/fr/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/fr/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [go](https://www.automicvault.com/fr/pkg/brew/go/) - Build dependency declared by Homebrew. - [wireguard-tools](https://www.automicvault.com/fr/pkg/brew/wireguard-tools/) - Shares av.db curated category or tags: cli, networking, vpn, wireguard. - [wireguard-go](https://www.automicvault.com/fr/pkg/brew/wireguard-go/) - Shares av.db curated category or tags: cli, networking, vpn, wireguard. - [wgcf](https://www.automicvault.com/fr/pkg/brew/wgcf/) - Shares av.db curated category or tags: cli, networking, vpn, wireguard. - [nebula](https://www.automicvault.com/fr/pkg/brew/nebula/) - Shares av.db curated category or tags: cli, mesh-networking, networking, vpn. - [boringtun](https://www.automicvault.com/fr/pkg/brew/boringtun/) - Shares av.db curated category or tags: cli, networking, vpn, wireguard. - [headscale-cli](https://www.automicvault.com/fr/pkg/brew/headscale-cli/) - Shares av.db curated category or tags: cli, networking, vpn, wireguard. - [openvpn](https://www.automicvault.com/fr/pkg/brew/openvpn/) - Shares av.db curated category or tags: cli, networking, vpn. - [sshuttle](https://www.automicvault.com/fr/pkg/brew/sshuttle/) - Shares av.db curated category or tags: cli, networking, vpn. ## Sources - Nucleus package database - Geiger risk classifier - secret-handling manifest - local coverage README - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer