These are used to register new devices to your tailnet. They have a maximum lifespan of 90 days and cannot have their expiry disabled. However, once a device is registered, it uses its own node key.
No. You must generate a new key.
1 year (8760 hours).
Yes, node keys rotate automatically every ~24 hours. This is seamless and requires no action.
If a remote device's key has already expired and you have lost access, Tailscale provides a "safety valve":
These are used to register new devices to your tailnet. They have a maximum lifespan of 90 days and cannot have their expiry disabled. However, once a device is registered, it uses its own node key.
No. You must generate a new key.
1 year (8760 hours).
Yes, node keys rotate automatically every ~24 hours. This is seamless and requires no action. tailscale key expiry
If a remote device's key has already expired and you have lost access, Tailscale provides a "safety valve": These are used to register new devices to your tailnet
