

When the invited user opens the link, they’ll be able to create a unique username and join your tailnet. Then, share the unique invite URL with that user.

Click Invite users, then Invite via link…, and select the role you’d like the invited user to have. To add a user with a passkey to your tailnet, if you’re an admin, you can generate an invite from the Users page of the admin console. For a detailed understanding of passkeys, we recommend the overview on passkeys from Apple. Passkeys are synchronized across devices using services you already use and trust, like iCloud Keychain from Apple, Google Password Manager, and 1Password. Each passkey is tied to the specific app or website it was created for, and can’t be phished by a lookalike domain name or fake login page design. They are a form of user authentication that doesn’t require the user to remember yet another password, and are guaranteed to be unique for each account and site you visit. Passkeys are a secure and convenient alternative to passwords. Now, we are happy to offer a modern replacement for passwords that meets our security requirements: passkeys.

Over time we expanded our login options to include GitHub, Apple, and custom OIDC providers. To keep logins sane, Tailscale started by requiring users log in using reasonably well-managed Google and Microsoft auth providers.
#1password yubikey support software
Passwords must be complex enough that a human cannot remember them and they must not be reused across services, which means we now need software to manage our passwords. As security-conscious software that connects your private devices across the internet, we had to face a harsh reality: the password is outdated technology that requires kludges to use safely. Tailscale has never supported password-based authentication.
