free · tailscale for minecraft
Tailscale for Minecraft, and when a tunnel fits better
Tailscale is one of the best pieces of networking software you can install. It builds an encrypted WireGuard mesh between your devices, works from behind CGNAT without any router configuration, and asks nothing of your ISP. For a Minecraft server among a fixed group of friends, it does the job well.
The question is not whether Tailscale works. It is who has to do the work, and how many of them there can be. Every player installs the client, creates an account, and gets invited to your tailnet before they can type an address, and the free Personal plan tops out at six users. That is fine for a small regular group and a wall for anything larger. Self Hostd solves the same connectivity problem from the other direction: one public address, and nothing at all on the player's side.
Where Tailscale is strong
- Excellent engineering. Connections are peer-to-peer where the network allows it, encrypted end to end with WireGuard, and fall back to relays automatically when a direct path is impossible.
- Nothing is exposed to the public internet at all, which is a stronger privacy position than any tunnel can offer.
- Works behind CGNAT, on Starlink, on mobile broadband and on locked-down networks, because it only ever makes outbound connections.
- The free Personal plan allows unlimited devices per user and is free indefinitely for non-commercial use, with MagicDNS giving machines memorable names instead of addresses.
What changes when players install nothing
No client on the player side
Friends type an address into Minecraft and play. No account, no install, no invitation to accept, no support conversation with someone's parent about why a VPN is being installed.
No six-user ceiling
Tailscale's free Personal plan covers up to six users. That is the whole server if you and five friends play, and a hard stop the moment a seventh person wants in. A public address has no headcount.
Funnel is not the workaround people hope for
Tailscale Funnel does expose services publicly, but it listens only on ports 443, 8443 and 10000 and only over TLS. Minecraft Java wants raw TCP on 25565, so Funnel cannot turn a tailnet server into a public one.
It knows what a Minecraft server is
Tailscale moves packets and correctly does not care what is inside them. Our launcher sizes RAM sensibly, applies sane Java flags, restarts crashed servers and explains failures in plain English.
The rest of the toolkit
A live console in the browser, control from Discord, and off-site backups twice a week, all on the free tier.
Side by side
| Tailscale | Self Hostd (free) | |
|---|---|---|
| Players install software | Yes, every one of them | No |
| Players need an account | Yes, and an invite to your tailnet | No |
| Free plan headcount | Up to 6 users on the Personal plan | No limit on who connects |
| Works behind CGNAT | Yes | Yes |
| Public server possible | No; Funnel is limited to ports 443, 8443 and 10000 over TLS | Yes, by default |
| Exposed to the internet | Nothing at all | A relay address, not your home IP |
| Minecraft awareness | None, by design | RAM guidance, Java flags, crash diagnosis, auto-restart |
| Backups | Not applicable | Twice-weekly, off-site, one-click restore |
Based on each product's published free tier as of 11 August 2026. If something here has changed, tell us and we will correct it.
Moving from a tailnet server to a public address
- 1Keep everything as it isYour server folder, world and mods do not change. Tailscale can stay installed; the two do not conflict.
- 2Create a server and pairMake a free account, press Create your server, and copy the 6-digit pairing code. Put the Self Hostd launcher in your server folder, open it, paste the code and press Start.
- 3Send the new address onceFriends who were on your tailnet can drop it if they only joined for Minecraft. The new address works for them and for anyone else you share it with.
Full step-by-step instructions, including the modpack path, live in the Self Hostd setup guide.
Questions you'd be right to ask
Can you play Minecraft over Tailscale?
Yes. Install Tailscale on the machine running the server and on every player's machine, add everyone to the same tailnet, and players connect to the server machine's Tailscale address. It works well and needs no port forwarding.
Do my friends need Tailscale installed to join?
Yes. A tailnet is a private network, so any machine that wants to reach the server has to be a member of it. That means installing the client, making an account and accepting your invitation before they can connect.
Can Tailscale Funnel make my Minecraft server public?
No. Funnel can only listen on ports 443, 8443 and 10000, and only over TLS-encrypted connections. Minecraft Java speaks raw TCP on 25565, so there is no configuration that makes Funnel serve it to people outside your tailnet. Use a tunnel or a hosted server for that.
How many people can join a Tailscale Minecraft server?
On the free Personal plan, up to six users, though each user can have unlimited devices. For a group of six or fewer that is not a constraint you will notice. Beyond that you are into a paid plan or a different approach.
Is Tailscale or a tunnel better for Minecraft?
It depends who is joining. For a fixed group who will install software once, Tailscale is excellent and exposes nothing publicly. For a server anyone should be able to join, or players you cannot walk through an install, a tunnel is the better fit.
Same connectivity, none of the installs
Coming from somewhere else?