---
tags:
  - tailscale
  - vpn
references:
  - https://tailscale.com/blog/tailscale-key-management
---
# About keys
Two types of keys: machine keys and node keys.

The machine key is tied to a specific machine and is used during pre-authorization (started when it first attempts to join a network).

When successfully added to a network a node key is generated on the client. The public component is tied to the machine key on the control server.
The node key is also tied to an identity; via the URL that's sent back to the client and then used to login.

The public node key is then distributed to other nodes it's allowed to communicate with.