Yes! Business customers can enjoy a 14-day free trial of the product with no user limit. After the 14-day trial, you’ll just need to choose a plan to keep using Tailscale. If you need an extension, our sales team is happy to help, and we’ll talk through your options.

Personal users have access to the free tier plan, which will be free forever.

We highly recommend signing up with a separate work email. This way, you get access to our full suite of enterprise features, which ensures you get the most out of your trial period.

If you don’t have access to a work email, our sales team is happy to help.

Simply put, it all comes down to your domain.

If you create a tailnet with a public domain, such as Gmail, Apple, or a personal GitHub account, it’s treated as personal use. This is perfect for things like playing games with friends, or securely connecting to anything from a DigitalOcean droplet to a Raspberry Pi, home security camera, or even a Steam Deck. These tailnets are automatically enrolled in the free Personal plan.

If you create a tailnet with a custom domain, it’s considered business use, and you’ll be automatically enrolled in a free trial. This setup is ideal for securely connecting critical infrastructure like production clusters, Kubernetes clusters, on-premise databases, and more.

Yes, you can opt out of the trial in the admin console. Once the trial ends, you will be on the Personal plan.

Please note, however, that the Personal plan is not intended for commercial use. If you sign up for Tailscale with your work email or other custom domains (e.g., @acme.com), then the Tailscale account is owned by the company or organization that owns and controls that email domain, regardless of which plan you are on.

Our pricing model is focused on giving you more value and ensuring your bill is as predictable as possible. Previously, we charged based on monthly active users, but we heard from customers that this led to unpredictable billing.

As part of our switchover to seat-based pricing, we’ve made the free tier more generous and added meaningful new features to both the Standard and Premium plans. With the shift from our former Starter plan to the new and better Standard plan, we have slightly increased the price per seat. But even though we’ve also added more to the Premium plan, we’ve kept this price point the same.

Our goal is to give Tailscale users more value while making it easier to use Tailscale across both simple and more advanced use cases.

Just as the name suggests, it’s all about seats. Not user devices, those are unlimited on every plan. With Tailscale, you pay for a certain number of seats on your tailnet. When a user joins your tailnet, they “occupy” a seat. A user can also “vacate” that seat to free it up.

You choose the number of seats your tailnet has. At the start of the month, you will be billed based on the number of seats. There’s no hard limit on seats—you can scale up as needed.

And, if you’re on an Enterprise plan, you can also choose to pay via an annual invoice.

A user device is simply anything that is not tagged as a resource! User devices are free and unlimited.

A tagged resource is a device that has certain service features enabled, such as being tagged as an exit node, subnet router, app connector, 4via6 router, or Kubernetes Operator.

Ephemeral resources are devices tagged as short-running resources. This is done by our Kubernetes operator, GitHub action, or set by the user. Ephemeral resource usage is based on a minute pool that is tied to the resource’s lifespan. If an ephemeral device is present in the tailnet for more than four hours, it will not count against the minute pool, and will instead be counted as a standard tagged resource.

For a user to join a tailnet, a vacant seat must be available for them to occupy. Seats are reusable, meaning they can be continually vacated and occupied by different users.

Upon inviting or provisioning a user, that user does not immediately occupy a seat. If the approvals feature is enabled as recommended, users also need admin approval to join. A user then occupies a vacant seat when they first log in to the admin console or when they first authenticate a device.

A user vacates a seat when they leave the tailnet, or if their account is deleted, suspended, or otherwise deprovisioned by the IdP (a user just deleting all of their devices is not enough). This allows a different user to occupy it.

Users provisioned by SCIM do not occupy a seat until they log in. Once they first log in to the admin console or when they first authenticate a device, they are charged normally as a user occupying a seat.

We chose this specifically to help avoid charges from over-provisioning mistakes, so please go forth and provision without worry!

The tailnet Owner, Admin, or Billing admin can increase or decrease the number of purchased seats per month.

Keep in mind that you cannot decrease below the number of seats that are occupied. For example, if you have 20 seats and they’re all occupied, you would need to remove some users before decreasing the number of seats. If you have 20 seats and 3 seats are vacant, you can simply decrease to 17 seats.

Here are the nitty-gritty details:

Adding seats within a monthly billing period will charge the prorated seat cost. In other words, if you add a seat halfway through the month, you will only be charged half a month for that seat.

Removing seats within a monthly billing period does not affect the cost for that month. Changes will reflect on the next month’s billing cycle.

The number of seats you have can’t go below the number of actively-filled seats. After all, every user who logs in needs to occupy a seat.

Yes! We were very intentional in our design and choice of seat-based pricing to ensure this aspect is as fair and flexible as possible.

A seat can be reused by multiple users. For example, a user can join a tailnet and occupy a seat. They can vacate that seat, such as by being deleted, and a second user can then join and occupy that same seat. In that case, you’re only charged for one seat, not two.

Separate from the plans, Platform Extensions are available as a way for you to tailor and customize Tailscale to your specific needs. Whether you need more tagged resources for your exit node-heavy setup or more ephemeral nodes for your CI/CD focus, our Platform Extensions aim to remove the constraints of a handful of rigid plans and help you tailor Tailscale and our platform and products to your specific needs.

If you’re looking for AI solutions, Aperture is Tailscale’s new unified AI governance solution. It’s feature-rich with the ability to see and stop tool calls before users or agents make them, keep API keys safe, get detailed session logs for auditability, and more. Aperture provides visibility and control over AI agent usage by centralizing access and tying it to Tailscale identity.

Aperture supports major agents, like Claude Code, Codex, Gemini CLI, and agent frameworks that support a custom base URL. It connects self-hosted OSS models and hosted models from OpenAI, Anthropic, and Google. For more information, visit this page.

We believe moving to the new plans is a great option for most users. We designed the new Personal plan to have updated benefits, like allowing more users, which makes the switch a net positive for former Personal users. Current Personal Plus users will be able to keep their plans as is or switch to the free Personal Plan that should meet the needs of the vast majority of current Personal Plus users.

That said, there’s no rush. If you prefer to stay on the former Personal and Personal Plus plans, you can continue using them as legacy accounts for the foreseeable future. And if you ever decide to move to a new plan, you’re free to do so at any time. However, moving to a new plan is a one-way change, and you won’t be able to move back to your previous legacy plan.

The new Personal plan now allows 6 users, an increase from the former plan’s 3 users. This is also equivalent to the former Personal Plus plan, which had a maximum of 6 users as well.

Much like with the legacy Personal and Personal Plus plans, Personal Pro accounts stand to gain a lot from a migration to the new Personal plan, which now grants more free benefits.

To grant these accounts those free and added benefits, we will migrate former Personal Pro plans to the new Personal plan. For anyone interested in what the new Standard plan offers, we’ll also provide a discount to help make that transition easier.

This will be handled the same way as accounts on the former Starter plan, as detailed in “What happens to accounts on the former Starter and Premium plans?”

This will be handled the same way as accounts on the former Premium plan, as detailed in “What happens to accounts on the former Starter and Premium plans?”

This will be handled the same way as accounts on the former Starter and Premium plans, as detailed in “What happens to accounts on the former Starter and Premium plans?”

We believe the best user experience comes from having clear visibility into approaching plan limits and receiving appropriate and timely alerts, like email notifications, so that there are no surprises.

With that in mind, we are currently not enforcing the hard limits or overages of ACL groups, multiple tailnets, tagged resources, and ephemeral resources.

Over the next few months, we’ll begin introducing these limits, along with added visibility into account limits and email notifications to help you stay informed and in control. We plan to overcommunicate as much as possible when we’ve added this visibility and when we plan to start enforcing plan limits.

Upon inviting or provisioning a user, that user does not immediately occupy a seat. If the approvals feature is enabled as recommended, users also need admin approval before joining the tailnet.

If a user logs in to the tailnet while seats are full, the seat count will automatically increase by 1 to accommodate and match the number of logged-in users.

For example, let’s say you invite a user to join your tailnet, but your tailnet’s seats are all occupied. When that user logs in, your tailnet’s seat count is automatically increased by 1 to accommodate the new user. In terms of billing, your total seats increased by one, and we will prorate the cost of that extra seat on your next bill.

We recommend working with our sales team to figure out the right allocation of seats for your needs. That said, removing a user and decreasing the number of seats right after an overage occurrence does not remove the charge on the account.

ACLs enable the adoption of least-privileged access, a core tenet of Zero Trust networking. Before joining your tailnet, every user is authenticated using an identity provider (IdP) such as Okta, Azure AD, or GitHub. ACL tags allow you to assign an identity to your devices. This is available for all plans!

Plans differ in the number of ACL groups and user roles available. Personal tailnets get access to the basic user roles of Owner, Admin, and Member. Paid plans can access advanced user roles to further segment their users and apply policies at scale.

Additionally, user provisioning through SCIM, which was previously only available to Enterprise plans, is now accessible to all paid plans!

All plans get access to Webhooks and Configuration audit logs!

Webhooks let you subscribe to events on your Tailscale network and process the event notifications through an integration or app. Configuration audit logs let you identify who did what, and when, in your tailnet.

While previously exclusive to our highest tier, Premium and higher plans can now access network flow logs, which let you understand how and when nodes on your tailnet connect. Log streaming is also available, allowing you to collect and send configuration audit logs or network flow logs about your tailnet to systems like a SIEM.

Tailscale provides device posture information like OS and Tailscale version to all plans!

Paid plans extend this further with MDM, EDR, and XDR integrations, such as with CrowdStrike, SentinelOne, XAM, and more. Geolocation adds even more information with identity collection.

Deployment with MDM is available on all plans! This enables streamlined deployment at scale. Going deeper with configuration through MDM is available for paid plans.