Manage devices
Understand personal computers versus machines, add devices for others, read the device list and remove devices.
Every device on a network is either a person's computer or a machine. The distinction decides what controls the device's access and what happens when its owner leaves, so picking the right type when you add a device matters.
Personal computer or machine?
| Personal computer | Machine / server | |
|---|---|---|
| Owner | A person | None — it belongs to the network |
| Access comes from | The people groups the person is in | The device's label |
| When the owner is removed from the network | Access is cut off | Keeps its access |
| Example | An employee's laptop | Database server, gateway, shared device |
Add a device
Open the form
On the network page, in Devices, click Add device.
Choose the type
In Device type, choose Personal computer or Machine / server.
Say who it belongs to
For a personal computer, choose Myself or another network member in For whom. For a machine, choosing a label in Label is required.
Create the key and run it on the device
Click Create key and run the command on the device. Details: Connect your device.
- When you create a personal computer key for someone else, that person is notified by email. The key itself is never emailed; you pass the command on to them.
- Choosing the type and adding devices for others is only available to network admins. Members can only add their own personal computer.
- A key is valid for 24 hours and works once.
Read the device list
Each row shows the device's name, its owner (machine for machines), its addresses on the network, Last seen and its status:
| Status | Meaning |
|---|---|
| Online | The device is connected right now. |
| Offline | The device is registered but not connected right now (off, asleep or tailscale down). |
| Access revoked | The device's session key has expired: it can't connect again without signing in. The usual cause is its owner being removed from the network or the organization. |
When a network has more than one device, use Search by name, label or address to search and Sort to sort (neither control appears on a network with a single device). The list doesn't refresh on its own; click Refresh to see a newly connected device.
Devices with revoked access
When a person is removed from a network or the organization, their personal computers move to Access revoked. Such a device can't connect again without signing in, and the panel closes its label and route-approval buttons; what's left is to delete it. Delete them so they don't use up your device limit.
Delete a device
Click Delete device on the device's row and confirm.
- Network admins can delete any device; members can only delete their own.
- Deleting can't be undone; the device can no longer connect. Reconnecting needs a new key.
- When you delete someone else's personal computer, its owner is notified by email.
Device limit
The device limit in your plan is the total across every network in the organization. Once it's reached, no new keys can be created; existing devices keep working. To make room, delete unused or revoked devices, or upgrade your plan.
Labels and shared networks
- Label: set it with the Change button next to Label on the device's row. Labeling a personal computer can't be undone — read Labels first.
- Shared networks: when a device wants to share a local network behind it, a Networks shared by this device section appears on its row. That network can't be reached until a network admin approves it with Approve.