{"slug":"antivirus-flagging-of-the-tailscale-client","title":"Antivirus flagging of the Tailscale client","tags":["tailscale"],"agent_summary":"Last validated: Apr 1, 2025","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Antivirus flagging of the Tailscale client\r\n\r\nLast validated: Apr 1, 2025\r\n\r\nThe Tailscale client can sometimes be falsely flagged by antivirus software, especially with new Tailscale releases, because many antivirus engines use machine learning and other automated tools that can result in false positives.\r\n\r\nDo not disregard your antivirus alerts. There are possible scenarios of a supply chain attack or malware masquerading as the Tailscale client, even though this has not yet happened.\r\n\r\nYou can compare the antivirus alert details to the recent changes in [our client changelog](https://tailscale.com/changelog#client) to determine when an alert corresponds to intended new behavior of Tailscale.\r\n\r\n## [Manage false positives](https://tailscale.com/docs/concepts/av-flagging\\#manage-false-positives)\r\n\r\nIf your antivirus software flags the Tailscale client, and you are confident that the warning is a false positive, you can take the following actions:\r\n\r\n- Report the false positive to the antivirus vendor.\r\n- Add Tailscale to your local allow list in your antivirus software settings. When Tailscale is upgraded, your antivirus may flag the new version again, and you may need to re-add the Tailscale client to your allow list, depending on which antivirus software you use.\r\n- Email screenshots and information about the antivirus software you are using, including the name and version, to `security@tailscale.com`. This may result in us contacting the antivirus vendor directly to raise the urgency.\r\n\r\n## [Manage true positives](https://tailscale.com/docs/concepts/av-flagging\\#manage-true-positives)\r\n\r\nIf you believe the antivirus software is flagging a true positive, or you are not sure, you can email `security@tailscale.com` with the following information:\r\n\r\n- Screenshots that display the flagged warning message in your antivirus software.\r\n- Details about the antivirus product you are using, including the name and version.\r\n- Information about recent Tailscale client upgrades or tailnet changes.\r\n- A description of why you suspect that the flagging is a true positive.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Antivirus flagging of the Tailscale client</h1>\n<p>Last validated: Apr 1, 2025</p>\n<p>The Tailscale client can sometimes be falsely flagged by antivirus software, especially with new Tailscale releases, because many antivirus engines use machine learning and other automated tools that can result in false positives.</p>\n<p>Do not disregard your antivirus alerts. There are possible scenarios of a supply chain attack or malware masquerading as the Tailscale client, even though this has not yet happened.</p>\n<p>You can compare the antivirus alert details to the recent changes in <a href=\"https://tailscale.com/changelog#client\">our client changelog</a> to determine when an alert corresponds to intended new behavior of Tailscale.</p>\n<h2><a href=\"https://tailscale.com/docs/concepts/av-flagging#manage-false-positives\">Manage false positives</a></h2>\n<p>If your antivirus software flags the Tailscale client, and you are confident that the warning is a false positive, you can take the following actions:</p>\n<ul>\n<li>Report the false positive to the antivirus vendor.</li>\n<li>Add Tailscale to your local allow list in your antivirus software settings. When Tailscale is upgraded, your antivirus may flag the new version again, and you may need to re-add the Tailscale client to your allow list, depending on which antivirus software you use.</li>\n<li>Email screenshots and information about the antivirus software you are using, including the name and version, to <code>security@tailscale.com</code>. This may result in us contacting the antivirus vendor directly to raise the urgency.</li>\n</ul>\n<h2><a href=\"https://tailscale.com/docs/concepts/av-flagging#manage-true-positives\">Manage true positives</a></h2>\n<p>If you believe the antivirus software is flagging a true positive, or you are not sure, you can email <code>security@tailscale.com</code> with the following information:</p>\n<ul>\n<li>Screenshots that display the flagged warning message in your antivirus software.</li>\n<li>Details about the antivirus product you are using, including the name and version.</li>\n<li>Information about recent Tailscale client upgrades or tailnet changes.</li>\n<li>A description of why you suspect that the flagging is a true positive.</li>\n</ul>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}