Tailscale is awesome. Until it stops working. Suddenly your devices cannot see each other. Your private network feels broken. And you just want things to connect again.
TL;DR: When Tailscale is not working, the problem is usually simple. Most issues come from expired logins, firewall blocks, outdated apps, DNS problems, or relay connection limits. Restarting Tailscale, updating the app, checking firewalls, and re-authenticating often fixes it fast. Follow the eight proven fixes below and you’ll likely be back online in minutes.
Let’s break it down in a simple way. No confusing tech talk. Just clear steps that work.
Table of Contents
1. Restart Tailscale (Yes, Really)
This sounds basic. But it works more often than you think.
Tailscale runs as a background service. Sometimes it freezes. Or disconnects silently. A quick restart can refresh the connection.
- On Windows: Restart the Tailscale app or service.
- On macOS: Quit and reopen Tailscale.
- On Linux: Use sudo tailscale down then sudo tailscale up.
- On mobile: Toggle Tailscale off and on.
This forces it to reconnect to the coordination server and rebuild peer connections.
If that fixes it, you’re done. If not, keep going.
2. Check If You’re Logged In
Tailscale depends on authentication. If your login expires, your device falls off the network.
This happens more than people realize.
Open the Tailscale app. Look at your status.
- Does it say Needs login?
- Does it show your correct account email?
- Is the device listed in the admin console?
If not, log out. Then log back in.
Also visit the Tailscale Admin Console in your browser. Check if:
- The device is marked as connected
- The machine is expired
- Key expiry is enabled
If key expiry removed your device, reauthenticate it. Problem solved.
3. Update Tailscale to the Latest Version
Old versions cause weird problems.
Tailscale updates often. These updates fix bugs. Improve relay handling. Improve NAT traversal.
If one device runs an old version, it may struggle to connect to newer peers.
Check your version:
- Windows/macOS: In the app settings
- Linux: Run tailscale version
Compare it to the latest version on the official site.
If you’re behind, update it. Then restart the device.
This alone fixes connection failures in many cases.
4. Look at Your Firewall
Firewalls love to block things. Even things you actually want.
Tailscale needs specific ports open to work properly. While it can fall back to relay servers (DERP), a strict firewall can still break connectivity.
Check:
- Windows Defender Firewall
- macOS Firewall
- Router firewall settings
- Corporate network restrictions
Make sure Tailscale is allowed.
If you’re on a company or school network, they might block UDP traffic. That can break direct connections.
Try switching to a different network. For example:
- Turn off Wi-Fi and use mobile hotspot
- Test from home instead of office
If it works there, your original network is the issue.
5. Check If Devices Can Ping Each Other
Let’s test connectivity.
Each Tailscale device gets a unique IP address. It usually looks like:
100.x.x.x
From one device, try pinging another:
ping 100.x.x.x
If it fails:
- The devices may not be connected
- Firewall rules may block traffic
- ACL rules may prevent communication
Now check your Access Control Lists (ACLs).
In the Admin Console:
- Open Access Controls
- Review your rules
- Make sure the devices are allowed to talk
If ACL rules block access, devices appear online but cannot connect.
This one confuses many users.
6. DNS Might Be the Real Problem
Sometimes Tailscale works fine.
But DNS does not.
You try connecting using a hostname. It fails. But the IP works.
That’s a DNS issue.
Check your MagicDNS settings:
- Is MagicDNS enabled?
- Are domain names resolving properly?
- Do you see DNS errors?
Try this test:
- Ping using IP address
- Ping using device hostname
If IP works but name doesn’t, DNS needs attention.
Also check if another VPN is running. Two VPNs at once often break DNS resolution.
Turn off other VPNs. Then test again.
7. Relay (DERP) Connection Problems
Tailscale creates direct connections when possible.
If it cannot, it uses a relay server called DERP.
Relays are slower. But they work behind strict firewalls.
Sometimes the relay connection gets unstable.
You can check connection type using:
tailscale status
Look for:
- Direct connection
- Relay connection
- Offline
If it constantly switches or drops, your router’s NAT may be the issue.
Try:
- Restarting your router
- Enabling UPnP on your router
- Disabling aggressive firewall filtering
Sometimes old routers handle UDP poorly. A firmware update can fix that.
8. Reinstall Tailscale (Clean Slate Fix)
If nothing works, go nuclear. In a calm way.
Uninstall Tailscale completely.
Then:
- Reboot your device
- Download the latest version
- Install fresh
- Log back in
This clears corrupted configs.
It also resets network adapters created by Tailscale.
Many mysterious issues disappear after a clean reinstall.
Bonus Checks (Quick but Powerful)
Before you panic, check these small things:
- System clock correct? Wrong time can break authentication.
- Internet working normally? Try browsing a website.
- Too many devices? Check your plan’s device limits.
- Subnet routes configured? Misconfigured subnet routers can block traffic.
Simple things often cause big headaches.
How to Prevent Tailscale Problems in the Future
Here’s how to stay ahead of issues:
- Keep automatic updates enabled
- Review ACLs after changes
- Restart routers occasionally
- Avoid running multiple VPNs together
- Monitor key expiry settings
Also, label your devices clearly in the admin console. It helps troubleshooting later.
Organization saves time.
When to Contact Support
If you’ve tried all eight fixes and nothing works, it’s time to escalate.
Before contacting support, gather:
- Your Tailscale version number
- The output of tailscale status
- The output of tailscale netcheck
- Your operating system details
This makes support much faster.
The more details you provide, the easier it is for them to help.
Final Thoughts
Tailscale is usually very stable. When it breaks, the cause is often small.
A restart. An expired login. A firewall block. An outdated version.
The good news?
Most Tailscale problems are fixable in under 15 minutes.
Work through the fixes step by step. Don’t skip around randomly. Be systematic.
You’ll likely restore your private network fast.
And when it reconnects?
That little green “Connected” status never looked so satisfying.
