Port 41641Tailscale

Tailscale commonly uses UDP/41641 for encrypted peer-to-peer VPN traffic.

transport: udp
in transit: encrypted
assignment: unofficial
risk: 3/10
lookups: 0

Technical Details

what runs on :41641

This is a Tailscale convention, not an IANA-assigned service. Tailscale uses WireGuard-based encrypted traffic over UDP; the devices use Tailscale coordination and NAT traversal to establish peer connections. UDP/41641 is a common default listening port, though the port can vary by configuration or platform. UDP/3478 is also used for STUN connectivity checks.

Security Information

exposure of :41641

risk score

3/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

security averages 2.9 across 447 ports — this one sits 0.1 above.

in transit

encrypted

payloads are protected on the wire

assignment

unofficial

used by convention, not registered — what answers here varies by deployment

reachable over

udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

The port is intended to receive encrypted VPN traffic from peers, and a packet alone does not grant access: peers need valid cryptographic keys and tailnet authorization. It is a normal part of Tailscale direct connectivity, but exposing the daemon still creates an attack surface; keep Tailscale software updated and control access through tailnet policy.

Record

iana registry entry

port: :41641
service: Tailscale
transport: UDP
encryption: tls / encrypted
assignment: convention only
risk: 3/10caution
category: Security Remote Access
usage: Tailscale devices commonly use UDP port 41641 for direct peer-to-peer connections in a Tailscale mesh VPN. Engineers may see it as inbound UDP traffic on a device when peers establish direct paths instead of relaying traffic.
lookups: 0rank 993
added: 2026-11-13
updated: 2026-11-13
references: Tailscale: Firewall ports

Something wrong?

This record is maintained by the engineers who use port 41641. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-11-13.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 447 in security →

the 8 most looked-up other ports in security — 447 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCP	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

2 of 8 encrypted

Port :41641Tailscale

Technical Details

Security Information

Related Ports

Port 41641Tailscale