{"slug":"tailnet-names-and-types","title":"Tailnet names and types","tags":["tailscale"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Tailnet names and types\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nA Tailscale network (known as a tailnet) contains different types of names used to identify and connect everything within it. Each type of name serves a specific purpose, establishes the network's identity and namespace, device names identify individual nodes within it, MagicDNS names make those devices reachable, and access permissions and user identities define who or what can access specific resources.\r\n\r\nThere are three primary types of names:\r\n\r\n- **Tailnet DNS name**: The fully qualified domain (FQDN) that is used for name resolution throughout your tailnet.\r\n- **Machine name**: The name of a device or node in your tailnet.\r\n- **Tailnet ID**: The string used with the [Tailscale API](https://tailscale.com/docs/reference/tailscale-api).\r\n\r\n## [Tailnet DNS name](https://tailscale.com/docs/concepts/tailnet-name\\#tailnet-dns-name)\r\n\r\nWhen you create a new tailnet, Tailscale assigns it a DNS name with the format `tail.ts.net`, where `` is a randomly generated hexadecimal string such as `tailnet-fe8c.ts.net`.\r\n\r\nThis serves several important purposes, including enabling [MagicDNS](https://tailscale.com/docs/features/magicdns) to register DNS names for tailnet devices and serving as the fully qualified domain name for [HTTPS](https://tailscale.com/docs/how-to/set-up-https-certificates) certificates. It's also used by the [sharing](https://tailscale.com/docs/features/sharing) feature to uniquely identify shared tailnet devices. You can find your tailnet DNS name in the [DNS](https://login.tailscale.com/admin/dns) page of the admin console.\r\n\r\n### [Generate a new tailnet DNS name](https://tailscale.com/docs/concepts/tailnet-name\\#generate-a-new-tailnet-dns-name)\r\n\r\nYou must be an [Owner, Admin, or Network admin](https://tailscale.com/docs/reference/user-roles) to generate and select a new tailnet DNS name.\r\n\r\nIf you want to use a tailnet DNS name that's more memorable than the generated hexadecimal string (`tail.ts.net`), you can generate and choose from a selection randomized name options. This can make it easier to remember or type your tailnet DNS name when using features like [MagicDNS](https://tailscale.com/docs/features/magicdns). For example, `cat-crocodile.ts.net`. These options are randomly generated, and you can always revert this name back to the originally assigned hexadecimal string name.\r\n\r\nAfter you use a randomized name for HTTPS certificates, you cannot re-generate it. However, you will be able to switch between the randomized name and the default name.\r\n\r\nTo generate a new name:\r\n\r\n1. Open the [DNS](https://login.tailscale.com/admin/dns) page of the admin console.\r\n2. Select **Rename tailnet**.\r\n3. Confirm that you want to used the randomized name.\r\n4. Select one of the randomly generated tailnet names. If you don't want any of the proposed names, you can select **Re-roll options** to generate more options.\r\n5. Select **Rename tailnet**.\r\n\r\nWhen you select a random tailnet DNS name, it becomes your active tailnet name. If you previously used your default tailnet DNS name for [MagicDNS](https://tailscale.com/docs/features/magicdns), [HTTPS certificates](https://tailscale.com/docs/how-to/set-up-https-certificates), or [sharing](https://tailscale.com/docs/features/sharing), existing links to devices in your tailnet might break. This also applies when you revert back to the originally assigned tailnet DNS name.\r\n\r\n### [Revert to the original tailnet DNS name](https://tailscale.com/docs/concepts/tailnet-name\\#revert-to-the-original-tailnet-dns-name)\r\n\r\nTo revert back to the default tailnet DNS name:\r\n\r\n1. Open the [DNS](https://login.tailscale.com/admin/dns) page of the admin console.\r\n2. Select **Rename tailnet**.\r\n3. Confirm that you want to switch your tailnet name.\r\n4. Select the name that you want to use.\r\n5. Select **Rename tailnet**.\r\n\r\nBecause [MagicDNS](https://tailscale.com/docs/features/magicdns), [HTTPS certificates](https://tailscale.com/docs/how-to/set-up-https-certificates), and [sharing](https://tailscale.com/docs/features/sharing) rely on the tailnet DNS name, switching your tailnet DNS name may break existing links to devices in your tailnet.\r\n\r\n## [Machine names](https://tailscale.com/docs/concepts/tailnet-name\\#machine-names)\r\n\r\nMachine names are unique to each device in your tailnet. They're generated from the device's hostname (from the operating system) when the device joins the tailnet, and you can change a devices machine name from the admin console or the Tailscale CLI. The list of machines in your tailnet is located in the [Machines](https://login.tailscale.com/admin/machines) page of the admin console.\r\n\r\n## [Tailnet ID](https://tailscale.com/docs/concepts/tailnet-name\\#tailnet-id)\r\n\r\nThe Tailnet ID is a string assigned to a tailnet and used by the [Tailscale API](https://tailscale.com/docs/reference/tailscale-api). It's located in the [General](https://login.tailscale.com/admin/settings/general) page of the admin console.\r\n\r\n## [Display name](https://tailscale.com/docs/concepts/tailnet-name\\#display-name)\r\n\r\nWhen you create a tailnet, it displays the private domain or public email address in the Tailscale authentication page, admin console page header, client UI, and the client CLI. For example, `example.com`, `example@gmail.com`, or `user.github`. Setting a custom display name gives your tailnet a recognizable name, making it easier for team members to identify which environment they are authenticating to, joining, or are currently using.\r\n\r\nThe display name can always be set and viewed of the admin console, and viewing it in the Tailscale client requires version 1.88 or later.\r\n\r\nYou must be an [Owner or Admin](https://tailscale.com/docs/reference/user-roles) to set or edit the tailnet display name.\r\n\r\n1. Open the [General](https://login.tailscale.com/admin/settings/general) page of the admin console.\r\n2. Enter the display name. Use letters, numbers, spaces, apostrophes, and hyphens.\r\n3. Select **Save**.\r\n\r\nThe display name will appear anywhere your tailnet domain or email address typically displays. Display names can be up to 65 characters and can contain letters, numbers, spaces, apostrophes, and hyphens. You may not use periods or underscores.\r\n\r\n## [Legacy ID](https://tailscale.com/docs/concepts/tailnet-name\\#legacy-id)\r\n\r\nIn October 2025, this field was changed from **Organization** to **Legacy ID** and is only visible to existing tailnets prior to this field name change. Tailnets created after October 2025 will not display the **Legacy ID** field of the admin console.\r\n\r\nIf you previously used the **Organization** field for the [Tailscale API](https://tailscale.com/docs/reference/tailscale-api), update your settings to use the **Tailnet ID** field instead.\r\n\r\nThe **Legacy ID** field is automatically assigned when creating a new tailnet and displays in the [General](https://login.tailscale.com/admin/settings/general) page of the admin console. If you used a custom domain, it displays as the domain name such as `example.com`. If it's an email using a public/shared domain, the email address displays such as `user@gmail.com`. This name displays in the admin console header, the tailnet login page, and in the Tailscale client and provides an indicator of the tailnet you are using. Once created, you cannot change this name.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"

Tailnet names and types

\n

Last validated: Jan 5, 2026

\n

A Tailscale network (known as a tailnet) contains different types of names used to identify and connect everything within it. Each type of name serves a specific purpose, establishes the network's identity and namespace, device names identify individual nodes within it, MagicDNS names make those devices reachable, and access permissions and user identities define who or what can access specific resources.

\n

There are three primary types of names:

\n
    \n
  • Tailnet DNS name: The fully qualified domain (FQDN) that is used for name resolution throughout your tailnet.
    • \n
  • Machine name: The name of a device or node in your tailnet.
    • \n
  • Tailnet ID: The string used with the Tailscale API.
    • \n
\n

Tailnet DNS name

\n

When you create a new tailnet, Tailscale assigns it a DNS name with the format tail<ID>.ts.net, where <ID> is a randomly generated hexadecimal string such as tailnet-fe8c.ts.net.

\n

This serves several important purposes, including enabling MagicDNS to register DNS names for tailnet devices and serving as the fully qualified domain name for HTTPS certificates. It's also used by the sharing feature to uniquely identify shared tailnet devices. You can find your tailnet DNS name in the DNS page of the admin console.

\n

Generate a new tailnet DNS name

\n

You must be an Owner, Admin, or Network admin to generate and select a new tailnet DNS name.

\n

If you want to use a tailnet DNS name that's more memorable than the generated hexadecimal string (tail<ID>.ts.net), you can generate and choose from a selection randomized name options. This can make it easier to remember or type your tailnet DNS name when using features like MagicDNS. For example, cat-crocodile.ts.net. These options are randomly generated, and you can always revert this name back to the originally assigned hexadecimal string name.

\n

After you use a randomized name for HTTPS certificates, you cannot re-generate it. However, you will be able to switch between the randomized name and the default name.

\n

To generate a new name:

\n
    \n
  1. Open the DNS page of the admin console.
    2. \n
  2. Select Rename tailnet.
    3. \n
  3. Confirm that you want to used the randomized name.
    4. \n
  4. Select one of the randomly generated tailnet names. If you don't want any of the proposed names, you can select Re-roll options to generate more options.
    5. \n
  5. Select Rename tailnet.
    6. \n
\n

When you select a random tailnet DNS name, it becomes your active tailnet name. If you previously used your default tailnet DNS name for MagicDNS, HTTPS certificates, or sharing, existing links to devices in your tailnet might break. This also applies when you revert back to the originally assigned tailnet DNS name.

\n

Revert to the original tailnet DNS name

\n

To revert back to the default tailnet DNS name:

\n
    \n
  1. Open the DNS page of the admin console.
    2. \n
  2. Select Rename tailnet.
    3. \n
  3. Confirm that you want to switch your tailnet name.
    4. \n
  4. Select the name that you want to use.
    5. \n
  5. Select Rename tailnet.
    6. \n
\n

Because MagicDNS, HTTPS certificates, and sharing rely on the tailnet DNS name, switching your tailnet DNS name may break existing links to devices in your tailnet.

\n

Machine names

\n

Machine names are unique to each device in your tailnet. They're generated from the device's hostname (from the operating system) when the device joins the tailnet, and you can change a devices machine name from the admin console or the Tailscale CLI. The list of machines in your tailnet is located in the Machines page of the admin console.

\n

Tailnet ID

\n

The Tailnet ID is a string assigned to a tailnet and used by the Tailscale API. It's located in the General page of the admin console.

\n

Display name

\n

When you create a tailnet, it displays the private domain or public email address in the Tailscale authentication page, admin console page header, client UI, and the client CLI. For example, example.com, example@gmail.com, or user.github. Setting a custom display name gives your tailnet a recognizable name, making it easier for team members to identify which environment they are authenticating to, joining, or are currently using.

\n

The display name can always be set and viewed of the admin console, and viewing it in the Tailscale client requires version 1.88 or later.

\n

You must be an Owner or Admin to set or edit the tailnet display name.

\n
    \n
  1. Open the General page of the admin console.
    2. \n
  2. Enter the display name. Use letters, numbers, spaces, apostrophes, and hyphens.
    3. \n
  3. Select Save.
    4. \n
\n

The display name will appear anywhere your tailnet domain or email address typically displays. Display names can be up to 65 characters and can contain letters, numbers, spaces, apostrophes, and hyphens. You may not use periods or underscores.

\n

Legacy ID

\n

In October 2025, this field was changed from Organization to Legacy ID and is only visible to existing tailnets prior to this field name change. Tailnets created after October 2025 will not display the Legacy ID field of the admin console.

\n

If you previously used the Organization field for the Tailscale API, update your settings to use the Tailnet ID field instead.

\n

The Legacy ID field is automatically assigned when creating a new tailnet and displays in the General page of the admin console. If you used a custom domain, it displays as the domain name such as example.com. If it's an email using a public/shared domain, the email address displays such as user@gmail.com. This name displays in the admin console header, the tailnet login page, and in the Tailscale client and provides an indicator of the tailnet you are using. Once created, you cannot change this name.

\n

\"Project

\n

Ask AI

\n

reCAPTCHA

\n

Recaptcha requires verification.

\n

protected by reCAPTCHA

\n"}