{"slug":"taildrive","title":"Taildrive","tags":["tailscale"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Taildrive\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nTaildrive lets you persistently share folders with other users and devices on your Tailscale network (known as a tailnet). Using Taildrive, you can:\r\n\r\n- Share folders with your colleagues.\r\n- Access files from your desktop PC or NAS server from your phone, anywhere in the world.\r\n- Connect a backup utility, like [Duplicati](https://www.duplicati.com/) or [rclone](https://rclone.org/), to a Taildrive folder on your NAS.\r\n\r\nTaildriveis currently [in alpha](https://tailscale.com/docs/reference/tailscale-release-stages#alpha). To try it, follow the steps below to enable it for your network using Tailscale 1.64.0 or later.\r\n\r\n## [How it works](https://tailscale.com/docs/features/taildrive\\#how-it-works)\r\n\r\nNormally, maintaining a file server requires you to manage credentials and access rules separately from the connectivity layer. Taildrive offers a file server that unifies connectivity and [access controls](https://tailscale.com/docs/features/access-control), allowing you to share directories directly from the Tailscale client. You can then use your tailnet policy file to define which members of your tailnet can access a particular shared directory, and even define specific read and write permissions.\r\n\r\nBeginning in version 1.64.0, the Tailscale client includes a Web-based Distributed Authoring and Versioning (WebDAV) server that runs on `100.100.100.100:8080` while Tailscale is connected. Every directory that you share receives a globally-unique path consisting of the tailnet, the machine name, and the share name: `/<tailnet>/<machine>/<share>`.\r\n\r\nFor example, if you shared a directory with the share name `docs` from the machine `nas-device` in the tailnet `example.com`, the share's path would be `/example.com/nas-device/docs`.\r\n\r\n## [Configure Taildrive](https://tailscale.com/docs/features/taildrive\\#configure-taildrive)\r\n\r\nTaildrive's server component is only available on Linux, macOS, and Windows devices. iOS and Android devices can access directories shared from these platforms, but cannot share directories themselves.\r\n\r\n### [Enable Taildrive in the policy file](https://tailscale.com/docs/features/taildrive\\#enable-taildrive-in-the-policy-file)\r\n\r\nYou need to be an [Owner, Admin, or Network admin](https://tailscale.com/docs/reference/user-roles) to edit the tailnet policy file. Enabling Taildrive requires two steps: Enabling Taildrive on devices by setting a `nodeAttr`, and defining sharing permissions using [grants](https://tailscale.com/docs/features/access-control/grants).\r\n\r\n#### [Add `nodeAttrs` to enable Taildrive on devices](https://tailscale.com/docs/features/taildrive\\#add-nodeattrs-to-enable-taildrive-on-devices)\r\n\r\nTo share directories or access directories shared by other devices, you need to enable Taildrive in the `nodeAttrs` section of your tailnet policy file. [Edit your policy file](https://tailscale.com/docs/features/tailnet-policy-file/manage-tailnet-policies) to make this change.\r\n\r\nFor example, this policy will enable Taildrive on every member's devices. Every member of your tailnet will be able to share directories from their device and access shared directories.\r\n\r\n```json\r\n\"nodeAttrs\": [\\\r\n  {\\\r\n    \"target\": [\"autogroup:member\"],\\\r\n    \"attr\": [\\\r\n      \"drive:share\",\\\r\n      \"drive:access\",\\\r\n    ],\\\r\n  }\\\r\n]\r\n```\r\n\r\nYou can use the [visual policy editor](https://tailscale.com/docs/features/visual-editor) to manage your tailnet policy file. Refer to the [visual editor reference](https://tailscale.com/docs/reference/visual-editor) for guidance on using the visual editor.\r\n\r\nThe following policy enables Taildrive access on all devices, but only lets tailnet administrators share directories with Taildrive.\r\n\r\n```json\r\n\"nodeAttrs\": [\\\r\n  {\\\r\n    // Any device can access shared directories with Taildrive\\\r\n    \"target\": [\"*\"],\\\r\n    \"attr\": [\"drive:access\"],\\\r\n  },\\\r\n  {\\\r\n    // Only tailnet admins can use Taildrive to share directories\\\r\n    \"target\": [\"autogroup:admin\"],\\\r\n    \"attr\": [\\\r\n      \"drive:share\",\\\r\n      \"drive:access\",\\\r\n    ],\\\r\n  }\\\r\n]\r\n```\r\n\r\nYou can use the [visual policy editor](https://tailscale.com/docs/features/visual-editor) to manage your tailnet policy file. Refer to the [visual editor reference](https://tailscale.com/docs/reference/visual-editor) for guidance on using the visual editor.\r\n\r\n#### [Define sharing permissions](https://tailscale.com/docs/features/taildrive\\#define-sharing-permissions)\r\n\r\nNow that you've enabled Taildrive on your devices, you define specific sharing permissions using [grants](https://tailscale.com/docs/features/access-control/grants).\r\n\r\nThe broadest possible policy lets all devices access all shares in the tailnet, no matter which user or tag owns the device:\r\n\r\n```json\r\n\"grants\": [\\\r\n  {\\\r\n    \"src\": [\"*\"],\\\r\n    \"dst\": [\"*\"],\\\r\n    \"app\": {\\\r\n      \"tailscale.com/cap/drive\": [{\\\r\n        \"shares\": [\"*\"],\\\r\n        \"access\": \"rw\"\\\r\n      }]\\\r\n    }\\\r\n  }\\\r\n]\r\n```\r\n\r\nYou can use the [visual policy editor](https://tailscale.com/docs/features/visual-editor) to manage your tailnet policy file. Refer to the [visual editor reference](https://tailscale.com/docs/reference/visual-editor) for guidance on using the visual editor.\r\n\r\nYou may also choose to allow members to read and write to their own shared directories from any of their devices. A policy to allow this would look like this:\r\n\r\n```json\r\n\"grants\": [\\\r\n  {\\\r\n    \"src\": [\"autogroup:member\"],\\\r\n    \"dst\": [\"autogroup:self\"],\\\r\n    \"app\": {\\\r\n      \"tailscale.com/cap/drive\": [{\\\r\n        \"shares\": [\"*\"],\\\r\n        \"access\": \"rw\"\\\r\n      }]\\\r\n    }\\\r\n  }\\\r\n]\r\n```\r\n\r\nYou can use the [visual policy editor](https://tailscale.com/docs/features/visual-editor) to manage your tailnet policy file. Refer to the [visual editor reference](https://tailscale.com/docs/reference/visual-editor) for guidance on using the visual editor.\r\n\r\nYou can also limit write access or even define permissions for accessing specific shares. The following policy lets all tailnet members read files from the `company-docs` share with the tag `fileserver`, but does not grant access to any other shared directories besides `company-docs` and does not allow write access:\r\n\r\n```json\r\n\"grants\": [\\\r\n  {\\\r\n    \"src\": [\"autogroup:member\"],\\\r\n    \"dst\": [\"tag:fileserver\"],\\\r\n    \"app\": {\\\r\n      \"tailscale.com/cap/drive\": [{\\\r\n        \"shares\": [\"company-docs\"],\\\r\n        \"access\": \"ro\"\\\r\n      }]\\\r\n    }\\\r\n  }\\\r\n]\r\n```\r\n\r\nYou can use the [visual policy editor](https://tailscale.com/docs/features/visual-editor) to manage your tailnet policy file. Refer to the [visual editor reference](https://tailscale.com/docs/reference/visual-editor) for guidance on using the visual editor.\r\n\r\nNow that you've configured permissions, you can share your folders.\r\n\r\n## [Sharing and accessing folders with Taildrive](https://tailscale.com/docs/features/taildrive\\#sharing-and-accessing-folders-with-taildrive)\r\n\r\n[macOS](https://tailscale.com/docs/features/taildrive?tab=macos) [Windows](https://tailscale.com/docs/features/taildrive?tab=windows) [Linux](https://tailscale.com/docs/features/taildrive?tab=linux) [Synology](https://tailscale.com/docs/features/taildrive?tab=synology) [iOS](https://tailscale.com/docs/features/taildrive?tab=ios) [Android](https://tailscale.com/docs/features/taildrive?tab=android)\r\n\r\nTailscale must be running to access Taildrive shares at `100.100.100.100:8080`.\r\n\r\n### [Share directories with Taildrive](https://tailscale.com/docs/features/taildrive\\#share-directories-with-taildrive)\r\n\r\nOn macOS, open **Settings** then **File Sharing** in the Tailscale client to manage Taildrive sharing. Because Taildrive is in alpha, the Tailscale client hides the **File Sharing** option by default. To show it, run one of the following commands in a terminal.\r\n\r\nFor applications installed from the App store:\r\n\r\n```shell\r\ndefaults write io.tailscale.ipn.macos FileSharingConfiguration -string show\r\n```\r\n\r\nFor applications downloaded from `tailscale.com`:\r\n\r\n```shell\r\ndefaults write /Users/$(whoami)/Library/Preferences/io.tailscale.ipn.macsys.plist FileSharingConfiguration show\r\n```\r\n\r\nIf the Tailscale application is already running, close and reopen it to pick up the new setting.\r\n\r\nOnce you've enabled the Taildrive settings in the terminal, you will find a **File Sharing** tab on the Settings screen.\r\n\r\nSelect **Choose Shared Folders** to start managing your shared folders.\r\n\r\nTo add a new share, select the **+** (plus) button. Once you select a folder, the share will be automatically named after the selected folder.\r\n\r\nYou can rename the share by double selecting its name in the list.\r\n\r\nTo remove a share, select it in the list and select the **−** (minus) button.\r\n\r\n### [Access directories shared with Taildrive](https://tailscale.com/docs/features/taildrive\\#access-directories-shared-with-taildrive)\r\n\r\nYou can access Taildrive shares by connecting to the Taildrive server at `100.100.100.100:8080`.\r\n\r\n1. Open Finder, then select **Go** from the app menu. Choose **Connect to Server**. Alternatively, with Finder open, you can use the keyboard shortcut `Cmd` \\+ `K`.\r\n2. In the **Server address** field, enter `http://100.100.100.100:8080`\r\nYou can add this address to your favorites by selecting the **+** icon below the **Favorite Servers** table.\r\n3. When the **Unsecured Connection** prompt appears, select **Continue**. While the connection takes place over HTTP, it is still encrypted in Tailscale's WireGuard tunnels, so your connection is still secure.\r\n4. Choose **Guest** in the **Connect As:** menu and select **Connect**.\r\n\r\nmacOS will connect to the Taildrive WebDAV server and show a Finder window with your tailnet DNS name as a folder. Inside that folder, Taildrive will load a folder for each device in your tailnet, and any shares that are active on the devices will appear within those folders.\r\n\r\n## [Limitations](https://tailscale.com/docs/features/taildrive\\#limitations)\r\n\r\n- A device [shared](https://tailscale.com/docs/features/sharing) into your tailnet cannot access any Taildrive folders in your tailnet. Similarly, a device you share to another tailnet cannot access any Taildrive folders in the other tailnet\r\n- Using Taildrive with `rclone` on client version 1.64.2 or earlier will fail without the `--inplace` flag. Use [version 1.65.75](https://pkgs.tailscale.com/unstable) or later to avoid this.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Taildrive</h1>\n<p>Last validated: Jan 5, 2026</p>\n<p>Taildrive lets you persistently share folders with other users and devices on your Tailscale network (known as a tailnet). Using Taildrive, you can:</p>\n<ul>\n<li>Share folders with your colleagues.</li>\n<li>Access files from your desktop PC or NAS server from your phone, anywhere in the world.</li>\n<li>Connect a backup utility, like <a href=\"https://www.duplicati.com/\">Duplicati</a> or <a href=\"https://rclone.org/\">rclone</a>, to a Taildrive folder on your NAS.</li>\n</ul>\n<p>Taildriveis currently <a href=\"https://tailscale.com/docs/reference/tailscale-release-stages#alpha\">in alpha</a>. To try it, follow the steps below to enable it for your network using Tailscale 1.64.0 or later.</p>\n<h2><a href=\"https://tailscale.com/docs/features/taildrive#how-it-works\">How it works</a></h2>\n<p>Normally, maintaining a file server requires you to manage credentials and access rules separately from the connectivity layer. Taildrive offers a file server that unifies connectivity and <a href=\"https://tailscale.com/docs/features/access-control\">access controls</a>, allowing you to share directories directly from the Tailscale client. You can then use your tailnet policy file to define which members of your tailnet can access a particular shared directory, and even define specific read and write permissions.</p>\n<p>Beginning in version 1.64.0, the Tailscale client includes a Web-based Distributed Authoring and Versioning (WebDAV) server that runs on <code>100.100.100.100:8080</code> while Tailscale is connected. Every directory that you share receives a globally-unique path consisting of the tailnet, the machine name, and the share name: <code>/&#x3C;tailnet>/&#x3C;machine>/&#x3C;share></code>.</p>\n<p>For example, if you shared a directory with the share name <code>docs</code> from the machine <code>nas-device</code> in the tailnet <code>example.com</code>, the share's path would be <code>/example.com/nas-device/docs</code>.</p>\n<h2><a href=\"https://tailscale.com/docs/features/taildrive#configure-taildrive\">Configure Taildrive</a></h2>\n<p>Taildrive's server component is only available on Linux, macOS, and Windows devices. iOS and Android devices can access directories shared from these platforms, but cannot share directories themselves.</p>\n<h3><a href=\"https://tailscale.com/docs/features/taildrive#enable-taildrive-in-the-policy-file\">Enable Taildrive in the policy file</a></h3>\n<p>You need to be an <a href=\"https://tailscale.com/docs/reference/user-roles\">Owner, Admin, or Network admin</a> to edit the tailnet policy file. Enabling Taildrive requires two steps: Enabling Taildrive on devices by setting a <code>nodeAttr</code>, and defining sharing permissions using <a href=\"https://tailscale.com/docs/features/access-control/grants\">grants</a>.</p>\n<h4><a href=\"https://tailscale.com/docs/features/taildrive#add-nodeattrs-to-enable-taildrive-on-devices\">Add <code>nodeAttrs</code> to enable Taildrive on devices</a></h4>\n<p>To share directories or access directories shared by other devices, you need to enable Taildrive in the <code>nodeAttrs</code> section of your tailnet policy file. <a href=\"https://tailscale.com/docs/features/tailnet-policy-file/manage-tailnet-policies\">Edit your policy file</a> to make this change.</p>\n<p>For example, this policy will enable Taildrive on every member's devices. Every member of your tailnet will be able to share directories from their device and access shared directories.</p>\n<pre><code class=\"language-json\">\"nodeAttrs\": [\\\r\n  {\\\r\n    \"target\": [\"autogroup:member\"],\\\r\n    \"attr\": [\\\r\n      \"drive:share\",\\\r\n      \"drive:access\",\\\r\n    ],\\\r\n  }\\\r\n]\n</code></pre>\n<p>You can use the <a href=\"https://tailscale.com/docs/features/visual-editor\">visual policy editor</a> to manage your tailnet policy file. Refer to the <a href=\"https://tailscale.com/docs/reference/visual-editor\">visual editor reference</a> for guidance on using the visual editor.</p>\n<p>The following policy enables Taildrive access on all devices, but only lets tailnet administrators share directories with Taildrive.</p>\n<pre><code class=\"language-json\">\"nodeAttrs\": [\\\r\n  {\\\r\n    // Any device can access shared directories with Taildrive\\\r\n    \"target\": [\"*\"],\\\r\n    \"attr\": [\"drive:access\"],\\\r\n  },\\\r\n  {\\\r\n    // Only tailnet admins can use Taildrive to share directories\\\r\n    \"target\": [\"autogroup:admin\"],\\\r\n    \"attr\": [\\\r\n      \"drive:share\",\\\r\n      \"drive:access\",\\\r\n    ],\\\r\n  }\\\r\n]\n</code></pre>\n<p>You can use the <a href=\"https://tailscale.com/docs/features/visual-editor\">visual policy editor</a> to manage your tailnet policy file. Refer to the <a href=\"https://tailscale.com/docs/reference/visual-editor\">visual editor reference</a> for guidance on using the visual editor.</p>\n<h4><a href=\"https://tailscale.com/docs/features/taildrive#define-sharing-permissions\">Define sharing permissions</a></h4>\n<p>Now that you've enabled Taildrive on your devices, you define specific sharing permissions using <a href=\"https://tailscale.com/docs/features/access-control/grants\">grants</a>.</p>\n<p>The broadest possible policy lets all devices access all shares in the tailnet, no matter which user or tag owns the device:</p>\n<pre><code class=\"language-json\">\"grants\": [\\\r\n  {\\\r\n    \"src\": [\"*\"],\\\r\n    \"dst\": [\"*\"],\\\r\n    \"app\": {\\\r\n      \"tailscale.com/cap/drive\": [{\\\r\n        \"shares\": [\"*\"],\\\r\n        \"access\": \"rw\"\\\r\n      }]\\\r\n    }\\\r\n  }\\\r\n]\n</code></pre>\n<p>You can use the <a href=\"https://tailscale.com/docs/features/visual-editor\">visual policy editor</a> to manage your tailnet policy file. Refer to the <a href=\"https://tailscale.com/docs/reference/visual-editor\">visual editor reference</a> for guidance on using the visual editor.</p>\n<p>You may also choose to allow members to read and write to their own shared directories from any of their devices. A policy to allow this would look like this:</p>\n<pre><code class=\"language-json\">\"grants\": [\\\r\n  {\\\r\n    \"src\": [\"autogroup:member\"],\\\r\n    \"dst\": [\"autogroup:self\"],\\\r\n    \"app\": {\\\r\n      \"tailscale.com/cap/drive\": [{\\\r\n        \"shares\": [\"*\"],\\\r\n        \"access\": \"rw\"\\\r\n      }]\\\r\n    }\\\r\n  }\\\r\n]\n</code></pre>\n<p>You can use the <a href=\"https://tailscale.com/docs/features/visual-editor\">visual policy editor</a> to manage your tailnet policy file. Refer to the <a href=\"https://tailscale.com/docs/reference/visual-editor\">visual editor reference</a> for guidance on using the visual editor.</p>\n<p>You can also limit write access or even define permissions for accessing specific shares. The following policy lets all tailnet members read files from the <code>company-docs</code> share with the tag <code>fileserver</code>, but does not grant access to any other shared directories besides <code>company-docs</code> and does not allow write access:</p>\n<pre><code class=\"language-json\">\"grants\": [\\\r\n  {\\\r\n    \"src\": [\"autogroup:member\"],\\\r\n    \"dst\": [\"tag:fileserver\"],\\\r\n    \"app\": {\\\r\n      \"tailscale.com/cap/drive\": [{\\\r\n        \"shares\": [\"company-docs\"],\\\r\n        \"access\": \"ro\"\\\r\n      }]\\\r\n    }\\\r\n  }\\\r\n]\n</code></pre>\n<p>You can use the <a href=\"https://tailscale.com/docs/features/visual-editor\">visual policy editor</a> to manage your tailnet policy file. Refer to the <a href=\"https://tailscale.com/docs/reference/visual-editor\">visual editor reference</a> for guidance on using the visual editor.</p>\n<p>Now that you've configured permissions, you can share your folders.</p>\n<h2><a href=\"https://tailscale.com/docs/features/taildrive#sharing-and-accessing-folders-with-taildrive\">Sharing and accessing folders with Taildrive</a></h2>\n<p><a href=\"https://tailscale.com/docs/features/taildrive?tab=macos\">macOS</a> <a href=\"https://tailscale.com/docs/features/taildrive?tab=windows\">Windows</a> <a href=\"https://tailscale.com/docs/features/taildrive?tab=linux\">Linux</a> <a href=\"https://tailscale.com/docs/features/taildrive?tab=synology\">Synology</a> <a href=\"https://tailscale.com/docs/features/taildrive?tab=ios\">iOS</a> <a href=\"https://tailscale.com/docs/features/taildrive?tab=android\">Android</a></p>\n<p>Tailscale must be running to access Taildrive shares at <code>100.100.100.100:8080</code>.</p>\n<h3><a href=\"https://tailscale.com/docs/features/taildrive#share-directories-with-taildrive\">Share directories with Taildrive</a></h3>\n<p>On macOS, open <strong>Settings</strong> then <strong>File Sharing</strong> in the Tailscale client to manage Taildrive sharing. Because Taildrive is in alpha, the Tailscale client hides the <strong>File Sharing</strong> option by default. To show it, run one of the following commands in a terminal.</p>\n<p>For applications installed from the App store:</p>\n<pre><code class=\"language-shell\">defaults write io.tailscale.ipn.macos FileSharingConfiguration -string show\n</code></pre>\n<p>For applications downloaded from <code>tailscale.com</code>:</p>\n<pre><code class=\"language-shell\">defaults write /Users/$(whoami)/Library/Preferences/io.tailscale.ipn.macsys.plist FileSharingConfiguration show\n</code></pre>\n<p>If the Tailscale application is already running, close and reopen it to pick up the new setting.</p>\n<p>Once you've enabled the Taildrive settings in the terminal, you will find a <strong>File Sharing</strong> tab on the Settings screen.</p>\n<p>Select <strong>Choose Shared Folders</strong> to start managing your shared folders.</p>\n<p>To add a new share, select the <strong>+</strong> (plus) button. Once you select a folder, the share will be automatically named after the selected folder.</p>\n<p>You can rename the share by double selecting its name in the list.</p>\n<p>To remove a share, select it in the list and select the <strong>−</strong> (minus) button.</p>\n<h3><a href=\"https://tailscale.com/docs/features/taildrive#access-directories-shared-with-taildrive\">Access directories shared with Taildrive</a></h3>\n<p>You can access Taildrive shares by connecting to the Taildrive server at <code>100.100.100.100:8080</code>.</p>\n<ol>\n<li>Open Finder, then select <strong>Go</strong> from the app menu. Choose <strong>Connect to Server</strong>. Alternatively, with Finder open, you can use the keyboard shortcut <code>Cmd</code> + <code>K</code>.</li>\n<li>In the <strong>Server address</strong> field, enter <code>http://100.100.100.100:8080</code>\r\nYou can add this address to your favorites by selecting the <strong>+</strong> icon below the <strong>Favorite Servers</strong> table.</li>\n<li>When the <strong>Unsecured Connection</strong> prompt appears, select <strong>Continue</strong>. While the connection takes place over HTTP, it is still encrypted in Tailscale's WireGuard tunnels, so your connection is still secure.</li>\n<li>Choose <strong>Guest</strong> in the <strong>Connect As:</strong> menu and select <strong>Connect</strong>.</li>\n</ol>\n<p>macOS will connect to the Taildrive WebDAV server and show a Finder window with your tailnet DNS name as a folder. Inside that folder, Taildrive will load a folder for each device in your tailnet, and any shares that are active on the devices will appear within those folders.</p>\n<h2><a href=\"https://tailscale.com/docs/features/taildrive#limitations\">Limitations</a></h2>\n<ul>\n<li>A device <a href=\"https://tailscale.com/docs/features/sharing\">shared</a> into your tailnet cannot access any Taildrive folders in your tailnet. Similarly, a device you share to another tailnet cannot access any Taildrive folders in the other tailnet</li>\n<li>Using Taildrive with <code>rclone</code> on client version 1.64.2 or earlier will fail without the <code>--inplace</code> flag. Use <a href=\"https://pkgs.tailscale.com/unstable\">version 1.65.75</a> or later to avoid this.</li>\n</ul>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}