Tailscale student and education discounts

Is there a Tailscale student discount?

Tailscale has no student discount you can claim at checkout. On 2026-08-31 the FAQ on tailscale.com/pricing answers the question this way:

Yes! Tailscale offers special pricing for eligible not-for-profit organizations and educational institutions. To receive the discount, you'll need documentation of your registered entity.

The size of it is published on the Tailscale docs page for free plans and discounts, read the same day:

Charities, not-for-profit organizations, and educational institutions receive a 50% discount off of list prices.

The mechanism is manual. You choose a paid plan on the Billing page of the admin console, then you contact Tailscale Support with your documentation. There is no code to paste during signup and no student verification service in the flow.

Two things follow, and they matter more than the percentage. The discount reduces the price of a paid plan, so it changes nothing for a person on the free Personal plan, which costs nothing already. And it is applied per account by a person at Tailscale, so eligibility rests on documentation rather than on an email address ending in .edu.

That is the purchasing answer. The rest of this guide is for the reader who usually types that question: a student with a laptop, a machine in a lab or a dorm room, a small VPS (virtual private server) and a phone. That setup needs no discount, because it needs no paid plan. Tailscale is a mesh VPN (virtual private network) built on WireGuard, and it gives every machine you own a fixed private address that works from any network. The free tier carries all of that.

Who Tailscale counts as an educational user

The pricing FAQ talks about a registered entity, which sounds like it rules out individuals. The Special Terms page, read on 2026-08-31, is wider. It defines eligible education users as:

Students and educators at accredited colleges, university, or other secondary schools or educational institutions, including without limitation community colleges, trade schools, professional schools, and post graduate programs.

The same page attaches a condition. The discount is:

Limited to uses in an academic setting or for academic purposes that are authorized by your school (such as, for example, teaching work, or a student organization).

Read those two together and the shape is clear. A registered student club, a course, or a research group has a case to bring to Support. A personal media server does not, because your school did not authorize it. That page also limits you to one plan discount per Tailscale account, and says a plan discount cannot be combined with other offers or promotions.

There is a second free route that some student work qualifies for. The same docs page says a GitHub organization can use Tailscale for free if it is being used for an open source project which has an OSI (Open Source Initiative) license. If your coursework is public on GitHub under such a license, read that before you ask about a discount.

The prices the education discount applies to

Prices move, so read them yourself before you plan around them. The rows below are the list prices tailscale.com/pricing showed on 2026-08-31. Enterprise is listed as custom pricing, so it has no row.

[
  {
    "plan": "Personal",
    "list_price_usd": 0,
    "edu_price_usd": 0
  },
  {
    "plan": "Standard",
    "list_price_usd": 8,
    "edu_price_usd": 4
  },
  {
    "plan": "Premium",
    "list_price_usd": 18,
    "edu_price_usd": 9
  }
]

Personal is free. Standard is listed at 8 US dollars per user per month, and Premium at 18. Apply the published 50% discount and those become 4 and 9 per user per month. That second column is arithmetic on the list price, not a figure Tailscale publishes, so treat it as an estimate of your bill and confirm it with Support. The per user part is the part to remember, because Tailscale bills by the number of people in your network, not the number of machines.

What the free Personal plan already covers

The Personal column on tailscale.com/pricing, read on 2026-08-31, lists:

• "Unlimited user devices"
• "Up to 6 users"
• "Up to 3 ACL groups"
• "Up to 50 tagged resources to start"
• "1,000 mins per month for ephemeral resources"
• "Access nearly all of Tailscale's features"
• "Try SSH and Kubernetes features"

The docs page states the user rule in one sentence: "The Personal plan permits 6 free users in a single Tailscale network, known as a tailnet."

Read the metering carefully, because it decides whether you ever pay. Devices are unlimited. Users are capped at six. A student with a laptop, a lab machine, a VPS and a phone is one user holding four devices, so nothing on that list is anywhere near a limit. Add a Raspberry Pi and a second laptop next term and you are still one user. The real edges of the free plan are the user count and the policy features, not the number of machines you own.

An ACL (access control list) is the policy file that decides which user may reach which device. Personal allows up to three groups inside that file. One student needs no groups at all, because every machine in the network is already yours.

Install it and check that it works

On Linux, including your VPS:

curl -fsSL https://tailscale.com/install.sh | sh
sudo tailscale up

tailscale up prints a login URL. Open it in a browser and sign in with your identity provider, for example Google or GitHub. Then check the result:

tailscale status
tailscale ip -4

tailscale status prints one line per machine in your tailnet, each with an address inside the 100.64.0.0/10 range that Tailscale hands out. A machine missing from that list never finished authentication, so run sudo tailscale up on it again and complete the browser step. tailscale ip -4 prints the address of the machine you are on, and that address does not change when the machine moves between networks. That is the whole value for a student: you can reach your dorm machine from campus wifi using an address that stays the same, without a port forward on a router you do not control.

To send phone traffic out through your VPS, turn that VPS into an exit node:

echo 'net.ipv4.ip_forward = 1' | sudo tee /etc/sysctl.d/99-tailscale.conf
echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
sudo sysctl -p /etc/sysctl.d/99-tailscale.conf
sudo tailscale up --advertise-exit-node

Then approve the exit node in the admin console, under that machine's route settings, and select it on the phone. Both halves are needed. Forwarding must be on because a Linux box drops packets that are not addressed to it, so with net.ipv4.ip_forward at 0 the node advertises itself and then discards every packet a client sends through it. Note also that tailscale up applies exactly the flags you give it, so repeat any flags you set earlier in the same command.

What actually breaks the free plan

The thing that breaks it is a person, not a machine. Six users share one free tailnet. A group project with five classmates plus you is exactly six, so it fits, and the seventh person does not. A teaching assistant, a second team, or a supervisor who wants to look at the running service is the moment the plan stops fitting. There is no soft landing here. The choices at that point are to remove a user, to share single machines, or to move to a paid plan.

The other break is policy. SCIM (system for cross domain identity management) provisioning, configuration through MDM (mobile device management) tools, device posture integrations and advanced user roles are listed on Standard and above, not on Personal. A university IT department needs those. A study group does not. If you are the student who ended up running the network for a department or a lab, that is exactly when the education discount becomes relevant, because you now want a paid plan and you are entitled to ask for half off list.

Three ACL groups is the quieter limit. It is generous for one person and thin for a project that wants separate rules for maintainers, contributors, markers and guests.

Share one machine instead of adding a user

The sharing docs, read on 2026-08-31, say sharing is available for all plans, and the recipient can accept the share from any Tailscale account. That makes sharing the cheapest fix when one classmate needs one machine.

Know the limits before you build on it. Tailscale quarantines shared machines by default, so a shared machine can receive incoming connections but cannot start them. Shared machines also do not advertise subnet routes into the other person's network. Sharing therefore works for "come and use my project server". It does not work as a way to build one flat network for eight people.

Free route one: Headscale on a cheap VPS

Headscale describes itself as an open source, self-hosted implementation of the Tailscale control server. Its documentation is direct about scope: it targets self-hosters and hobbyists, and it implements a single tailnet, suitable for personal use or a small open source organisation. The clients stay the ordinary Tailscale clients, so nobody has to learn a new app.

Install it on a small VPS with the official Debian package. Take the version from the project's releases page:

HEADSCALE_VERSION=""   # the release you want
HEADSCALE_ARCH="amd64"
wget --output-document=headscale.deb \
  "https://github.com/juanfont/headscale/releases/download/v${HEADSCALE_VERSION}/headscale_${HEADSCALE_VERSION}_linux_${HEADSCALE_ARCH}.deb"
sudo apt install ./headscale.deb
sudo nano /etc/headscale/config.yaml
sudo systemctl enable --now headscale
sudo systemctl status headscale

systemctl status headscale should report active (running). A unit that starts and then stops usually means the config file is wrong, so read journalctl -u headscale -n 50 before changing anything else. Then create a user, mint a key, and join a machine:

sudo headscale users create alice
sudo headscale users list
sudo headscale preauthkeys create --user "<USER_ID>"

sudo tailscale up --login-server https://headscale.example.com --authkey "<KEY>"

The honest cost. You need a VPS, a domain name and a TLS (transport layer security) certificate, because clients reach the control server over HTTPS. You also become the operator: while the control server is down, machines cannot log in and expired keys cannot be renewed, even though existing connections keep running. The full Headscale setup, config file and reverse proxy included is a longer job than one install command, and the VPS underneath it still costs a few dollars a month. What it removes is per user pricing. Twenty classmates cost the same as one. If you want a web interface and identity provider support in your own control plane, a self-hosted NetBird server is the other project in this shape.

Free route two: plain WireGuard with no control server

Drop the control plane completely. WireGuard is in the Linux kernel, so a VPS and one config file per device gives you a working private network with no account system at all. Each device gets a key pair, the server config holds one peer block per device, and every client points at the server's public address and port.

The cost is bookkeeping. There is no key distribution, so you hand config files to your classmates yourself. Every new member means editing the server config and reloading it, and a duplicate address in two peer blocks quietly breaks whichever one was written first. There is no NAT (network address translation) traversal either, so devices behind a campus or home router cannot reach each other directly, and every packet goes through the VPS. The list of jobs Tailscale does on top of WireGuard is the list you are taking on. For a four person project with one shared server it is genuinely fine, and it stays fine until someone loses a key. If neither route appeals, the wider set of mesh VPN products includes hosted options with different free tiers.

What to do, in order

1. If you are one student with several machines, stay on Personal. It costs nothing, and no discount applies to a free plan.
2. If the network is for a course, a lab or a registered student club, contact Tailscale Support before you pay. Half off list is worth one email and a scan of your paperwork.
3. If you need more than six people and no school entity will vouch for you, run Headscale on a small VPS.
4. If you need one shared server and nothing more, plain WireGuard is enough.

FAQ

Is there a Tailscale student discount?

Not as a self-serve product. Read on 2026-08-31, the pricing FAQ offers special pricing for eligible not-for-profit organizations and educational institutions, applied by contacting Support with documentation of your registered entity, and the docs page puts the figure at a 50% discount off list prices. The Special Terms page does name students and educators at accredited institutions as eligible education users, limited to academic use authorized by your school. Either way there is no checkout box, so the route is the same: pick a plan, then email Support.

How do I apply for the Tailscale education discount?

Choose your plan on the Billing page of the Tailscale admin console, then contact Tailscale Support and provide documentation for the entity you are claiming for. Tailscale applies the discount to the account after that. The Special Terms page limits you to one plan discount per account, and says a plan discount cannot be combined with other offers or promotions.

Does the discount help if I am on the free plan?

No. The discount is a percentage off a paid plan, and Personal is free, so there is nothing for the percentage to reduce. Most single students never need a paid plan, because devices are unlimited on Personal and the user count is the only thing the plan meters.

How many people can share one free Tailscale network?

Six. The docs state that the Personal plan permits 6 free users in a single tailnet. Five classmates plus you fits exactly, and a seventh person does not. If someone only needs access to one machine, share that machine instead of adding them as a user: sharing works on all plans, though a shared machine is quarantined by default, so it can receive connections but cannot start them.

Is Headscale free, and what does it cost me instead?

The software is free and open source, and it removes per user pricing completely. You still pay for the VPS it runs on, a domain name and a certificate, and you take on the operator's job: while your control server is down, machines cannot log in or renew expired keys. That trade is reasonable for a student project and poor for anything a whole class depends on the night before a deadline.