{"slug":"encrypted-connection-failed","title":"Encrypted connection failed","tags":["tailscale"],"agent_summary":"Last validated: Jan 30, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Encrypted connection failed\r\n\r\nLast validated: Jan 30, 2026\r\n\r\nThis topic explains a message that might appear in the Tailscale client and the actions you can take to address it. For a list of currently documented messages in the Tailscale admin console and client, refer to the main [Messages](https://tailscale.com/docs/reference/messages) topic.\r\n\r\n## [Message displayed in the client](https://tailscale.com/docs/reference/messages/client/tls-connection-failed\\#message-displayed-in-the-client)\r\n\r\n> Encrypted connection failed\r\n>\r\n> Tailscale could not establish an encrypted connection with `<connection target>`.\r\n\r\n## [Message ID](https://tailscale.com/docs/reference/messages/client/tls-connection-failed\\#message-id)\r\n\r\n`tls-connection-failed`\r\n\r\n## [Why you're seeing this message](https://tailscale.com/docs/reference/messages/client/tls-connection-failed\\#why-youre-seeing-this-message)\r\n\r\nThis message means the Tailscale client was unable to establish a secure, encrypted connection with another Tailscale component, such as a peer or the [control plane](https://tailscale.com/docs/concepts/control-data-planes). Tailscale requires [encryption](https://tailscale.com/docs/concepts/tailscale-encryption) for all connections, and this error occurs when the cryptographic handshake fails to complete. As a result, the connection fails because Tailscale cannot guarantee secure communication.\r\n\r\n## [What to do](https://tailscale.com/docs/reference/messages/client/tls-connection-failed\\#what-to-do)\r\n\r\nHere are some things you can try to resolve this issue:\r\n\r\n- Verify that both devices [have working internet connectivity](https://tailscale.com/docs/reference/troubleshooting/connectivity/connect-internet-failure) and that the Tailscale client is installed.\r\n- Restart the Tailscale clients to refresh the connection.\r\n- Update the Tailscale clients to the latest version.\r\n- Switch networks to rule out ISP or network-level filtering issues.\r\n- Verify that firewalls or security software are not blocking UDP traffic. Tailscale prefers encrypted peer connections.\r\n- Verify the system clock is accurate. Out-of-sync time can cause cryptographic handshakes to fail.\r\n- Verify there's no deep packet inspection, TLS interception, or VPN software interfering with encrypted traffic.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Encrypted connection failed</h1>\n<p>Last validated: Jan 30, 2026</p>\n<p>This topic explains a message that might appear in the Tailscale client and the actions you can take to address it. For a list of currently documented messages in the Tailscale admin console and client, refer to the main <a href=\"https://tailscale.com/docs/reference/messages\">Messages</a> topic.</p>\n<h2><a href=\"https://tailscale.com/docs/reference/messages/client/tls-connection-failed#message-displayed-in-the-client\">Message displayed in the client</a></h2>\n<blockquote>\n<p>Encrypted connection failed</p>\n<p>Tailscale could not establish an encrypted connection with <code>&#x3C;connection target></code>.</p>\n</blockquote>\n<h2><a href=\"https://tailscale.com/docs/reference/messages/client/tls-connection-failed#message-id\">Message ID</a></h2>\n<p><code>tls-connection-failed</code></p>\n<h2><a href=\"https://tailscale.com/docs/reference/messages/client/tls-connection-failed#why-youre-seeing-this-message\">Why you're seeing this message</a></h2>\n<p>This message means the Tailscale client was unable to establish a secure, encrypted connection with another Tailscale component, such as a peer or the <a href=\"https://tailscale.com/docs/concepts/control-data-planes\">control plane</a>. Tailscale requires <a href=\"https://tailscale.com/docs/concepts/tailscale-encryption\">encryption</a> for all connections, and this error occurs when the cryptographic handshake fails to complete. As a result, the connection fails because Tailscale cannot guarantee secure communication.</p>\n<h2><a href=\"https://tailscale.com/docs/reference/messages/client/tls-connection-failed#what-to-do\">What to do</a></h2>\n<p>Here are some things you can try to resolve this issue:</p>\n<ul>\n<li>Verify that both devices <a href=\"https://tailscale.com/docs/reference/troubleshooting/connectivity/connect-internet-failure\">have working internet connectivity</a> and that the Tailscale client is installed.</li>\n<li>Restart the Tailscale clients to refresh the connection.</li>\n<li>Update the Tailscale clients to the latest version.</li>\n<li>Switch networks to rule out ISP or network-level filtering issues.</li>\n<li>Verify that firewalls or security software are not blocking UDP traffic. Tailscale prefers encrypted peer connections.</li>\n<li>Verify the system clock is accurate. Out-of-sync time can cause cryptographic handshakes to fail.</li>\n<li>Verify there's no deep packet inspection, TLS interception, or VPN software interfering with encrypted traffic.</li>\n</ul>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}