32-bit
burnmachine scopepkgs.tailscale.com · publisher domain- File name
- tailscale-setup-full-1.102.2.exe
- SHA-256
- 396e54338d0b048f11e14905ecd41ae5d24319841263aed5ccd1694582a6a3d2
- Product code
- {A33E0BDB-322E-49C2-A198-25B52C2C4570}
by Tailscale Inc. · BSD-3-Clause
Tailscale is a WireGuard based mesh VPN, used to connect your computers and other devices together securely without proxies.
These URLs are the ones Tailscale Inc. declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Tailscale Inc. published. Delete it.
Windows · PowerShell
Get-FileHash "tailscale-setup-full-1.102.2.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "tailscale-setup-full-1.102.2.exe"Expected output
396e54338d0b048f11e14905ecd41ae5d24319841263aed5ccd1694582a6a3d2
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
This installer is an MSI package, so it takes the standard Windows Installer switches. That is a property of MSI itself rather than something the publisher declared.
32-bit · machine scope · MSI convention
msiexec /i "tailscale-setup-1.102.2-x86.msi" /qn /norestart64-bit · machine scope · MSI convention
msiexec /i "tailscale-setup-1.102.2-amd64.msi" /qn /norestartARM64 · machine scope · MSI convention
msiexec /i "tailscale-setup-1.102.2-arm64.msi" /qn /norestartRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
Silent install commands for every program we index · silent uninstall
Every guide on this tells you to hunt for the product code with Get-WmiObject or in the registry. You do not need to: it is published in the installer manifest, and it is printed below.
Product code · 32-bit, 64-bit, ARM64
{A33E0BDB-322E-49C2-A198-25B52C2C4570}
Uninstall, with the usual prompts
msiexec /x {A33E0BDB-322E-49C2-A198-25B52C2C4570}Silent, for deployment
msiexec /x {A33E0BDB-322E-49C2-A198-25B52C2C4570} /qn /norestartProduct code · 32-bit
{1E315926-E8B3-5D4B-9A42-FB347C325738}
Uninstall, with the usual prompts
msiexec /x {1E315926-E8B3-5D4B-9A42-FB347C325738}Silent, for deployment
msiexec /x {1E315926-E8B3-5D4B-9A42-FB347C325738} /qn /norestartProduct code · 64-bit
{B0E7F6FB-C0C6-51D9-9E80-CB1FEAB4CB19}
Uninstall, with the usual prompts
msiexec /x {B0E7F6FB-C0C6-51D9-9E80-CB1FEAB4CB19}Silent, for deployment
msiexec /x {B0E7F6FB-C0C6-51D9-9E80-CB1FEAB4CB19} /qn /norestartProduct code · ARM64
{9BF28BF1-237D-5239-A1E6-89A2A84B5AA7}
Uninstall, with the usual prompts
msiexec /x {9BF28BF1-237D-5239-A1E6-89A2A84B5AA7}Silent, for deployment
msiexec /x {9BF28BF1-237D-5239-A1E6-89A2A84B5AA7} /qn /norestartThe codes above belong to Tailscale 1.102.2, the version in our index. If you have an older release installed, its code is different and this command will report that the product is not installed. In that case run Get-Package -Name "Tailscale*" in PowerShell to read the code of what you actually have.
This removes the program as the publisher packaged it. Settings and files created after installation, typically under AppData, are deliberately left behind by the uninstaller and have to be deleted by hand if you want them gone.
Reinstalling and hitting error 1638? That is this same product code, and the command above is the fix.
Product codes for every program we index, with the msiexec switches and how to read the code off your own machine.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 6 of 6 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 6 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 6 of 6 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | BSD-3-ClauseA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from tailscale.com, which is a domain we have tied to Tailscale Inc.
Every one of the 6 installers on this page comes with the SHA-256 Tailscale Inc declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Tailscale.Tailscale --exactUpgrade later
winget upgrade --id Tailscale.TailscaleWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Tailscale, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Tailscale version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Tailscale Inc. and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Tailscale — just other entries, each with its own official URL and published hash.