Tailscale - Key Expiry

Yes, node keys rotate automatically every ~24 hours. This is seamless and requires no action.

No. The maximum is 1 year. This is enforced by Tailscale. tailscale key expiry

# Generate a key expiring in 72 hours tailscale auth-key --valid-for 72h tailscale auth-key --reusable --valid-for 2160h Generate a key expiring in 1 year (max) tailscale auth-key --reusable --valid-for 8760h Yes, node keys rotate automatically every ~24 hours