{"slug":"authorizing-the-tailscale-system-extension-on-macos","title":"Authorizing the Tailscale system extension on macOS","tags":["tailscale","auth"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Authorizing the Tailscale system extension on macOS\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nWhen launching Tailscale for the first time on your Mac, you may be presented with one or more of the following warnings.\r\n\r\n- ![The warning for 'System Extension Blocked' in macOS. There are two prompts for 'OK' and 'Open System Settings'.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fsystem-extension-warning.84bfc54e.png&w=750&q=75)\r\n- ![The warning for 'System Extension Approval Required' in the Tailscale app. There are two prompts of 'Ignore' and 'Open Settings'.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fsysext-inapp-modal.5e648d2b.png&w=750&q=75)\r\n- ![The warning for 'System Extension Approval Required...' in the Tailscale menu. This warning has an icon in the shape of an exclamation point in a triangle.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fsysext-inmenu-warning.c02791b3.png&w=750&q=75)\r\n\r\nThe above messages indicate that Tailscale launched successfully. However, granting permission to install the Tailscale system extension is necessary before Tailscale can connect your Mac to the network.\r\n\r\nSystem extensions are a macOS technology used by Tailscale to extend the networking features of your Mac. For further information on system extensions, refer to [below](https://tailscale.com/docs/concepts/macos-sysext#what-is-a-system-extension).\r\n\r\n## [Configuration steps](https://tailscale.com/docs/concepts/macos-sysext\\#configuration-steps)\r\n\r\nThe steps for granting permission to install the Tailscale extension will vary depending on the version of macOS you are using.\r\n\r\n### [macOS Sequoia 15 and later](https://tailscale.com/docs/concepts/macos-sysext\\#macos-sequoia-15-and-later)\r\n\r\n1. Go to **System Settings** and open the **General** tab.\r\n2. In the **Login Items & Extensions** section, scroll down to **Network Extensions**, and select the information ⓘ icon.\r\n3. Toggle **Tailscale Network Extension** to on, then authorize the operation using Touch ID, or by providing an administrator password.\r\n4. Select **Done**. If a window appears asking to install a VPN configuration, choose **Allow**.\r\n\r\nTailscale will begin connecting. If you have never logged into Tailscale before, you'll have to log in by using the Tailscale menu bar item at the top right of your screen.\r\n\r\n### [macOS Sonoma 14 and earlier](https://tailscale.com/docs/concepts/macos-sysext\\#macos-sonoma-14-and-earlier)\r\n\r\n1. Go to **System Settings** and open the **Privacy & Security** tab.\r\n2. Scroll down the list of options until you reveal the message **System software from application \"Tailscale.app\" was blocked from loading.**, and select **Allow**.\r\n3. Authorize the operation using Touch ID, or by providing an administrator password. If a window appears asking to install a VPN configuration, choose **Allow**.\r\n\r\nTailscale will begin connecting. If you have never logged into Tailscale before, you'll have to log in by using the Tailscale menu bar item at the top right of your screen.\r\n\r\n## [Manage using the CLI](https://tailscale.com/docs/concepts/macos-sysext\\#manage-using-the-cli)\r\n\r\nYou can manage system extensions for a device using the CLI command [`tailscale configure sysext`](https://tailscale.com/docs/reference/tailscale-cli#configure).\r\n\r\n## [What is a system extension?](https://tailscale.com/docs/concepts/macos-sysext\\#what-is-a-system-extension)\r\n\r\nYou might wonder why this is necessary. Behind the scenes, the Standalone variant of Tailscale for macOS uses a technology introduced in macOS Catalina 10.15 called [System Extensions](https://support.apple.com/HT210999).\r\n\r\nSystem extensions represent a safer replacement for the legacy Kernel Extensions technology used by many security and networking tools in previous versions of macOS. They run within a sandbox, meaning that Tailscale runs isolated from the operating system kernel in your Mac. This can provide additional security guarantees. Additionally, system extensions can be distributed outside the Mac App Store. This lets us provide a variant of Tailscale which doesn't depend on Apple for distribution.\r\n\r\nBecause system extensions are shared with other users of your Mac, explicit consent is required before they can be installed.\r\n\r\n## [Automate this process for your users](https://tailscale.com/docs/concepts/macos-sysext\\#automate-this-process-for-your-users)\r\n\r\nIf you are a system administrator managing a fleet of Macs, you can use a mobile device management (MDM) solution to automatically pre-approve the Tailscale system extension. Refer to the [MDM documentation](https://tailscale.com/docs/integrations/mdm/mac#approve-the-tailscale-system-extension-automatically) for further details.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"

Authorizing the Tailscale system extension on macOS

\n

Last validated: Jan 5, 2026

\n

When launching Tailscale for the first time on your Mac, you may be presented with one or more of the following warnings.

\n\n

The above messages indicate that Tailscale launched successfully. However, granting permission to install the Tailscale system extension is necessary before Tailscale can connect your Mac to the network.

\n

System extensions are a macOS technology used by Tailscale to extend the networking features of your Mac. For further information on system extensions, refer to below.

\n

Configuration steps

\n

The steps for granting permission to install the Tailscale extension will vary depending on the version of macOS you are using.

\n

macOS Sequoia 15 and later

\n
    \n
  1. Go to System Settings and open the General tab.
    2. \n
  2. In the Login Items & Extensions section, scroll down to Network Extensions, and select the information ⓘ icon.
    3. \n
  3. Toggle Tailscale Network Extension to on, then authorize the operation using Touch ID, or by providing an administrator password.
    4. \n
  4. Select Done. If a window appears asking to install a VPN configuration, choose Allow.
    5. \n
\n

Tailscale will begin connecting. If you have never logged into Tailscale before, you'll have to log in by using the Tailscale menu bar item at the top right of your screen.

\n

macOS Sonoma 14 and earlier

\n
    \n
  1. Go to System Settings and open the Privacy & Security tab.
    2. \n
  2. Scroll down the list of options until you reveal the message System software from application \"Tailscale.app\" was blocked from loading., and select Allow.
    3. \n
  3. Authorize the operation using Touch ID, or by providing an administrator password. If a window appears asking to install a VPN configuration, choose Allow.
    4. \n
\n

Tailscale will begin connecting. If you have never logged into Tailscale before, you'll have to log in by using the Tailscale menu bar item at the top right of your screen.

\n

Manage using the CLI

\n

You can manage system extensions for a device using the CLI command tailscale configure sysext.

\n

What is a system extension?

\n

You might wonder why this is necessary. Behind the scenes, the Standalone variant of Tailscale for macOS uses a technology introduced in macOS Catalina 10.15 called System Extensions.

\n

System extensions represent a safer replacement for the legacy Kernel Extensions technology used by many security and networking tools in previous versions of macOS. They run within a sandbox, meaning that Tailscale runs isolated from the operating system kernel in your Mac. This can provide additional security guarantees. Additionally, system extensions can be distributed outside the Mac App Store. This lets us provide a variant of Tailscale which doesn't depend on Apple for distribution.

\n

Because system extensions are shared with other users of your Mac, explicit consent is required before they can be installed.

\n

Automate this process for your users

\n

If you are a system administrator managing a fleet of Macs, you can use a mobile device management (MDM) solution to automatically pre-approve the Tailscale system extension. Refer to the MDM documentation for further details.

\n

\"Project

\n

Ask AI

\n

reCAPTCHA

\n

Recaptcha requires verification.

\n

protected by reCAPTCHA

\n"}