1. Prepare the Mac
Install and sign in to Tailscale on the host Mac, confirm it appears in your tailnet and note its stable MagicDNS name or Tailscale address. Keep macOS, Tailscale and MacReacher updated.
2. Prepare the viewer
Install Tailscale on the iPhone, iPad, Android device or client Mac and join the same authorised tailnet. Confirm the device can reach the host before troubleshooting MacReacher.
3. Add both routes
In MacReacher's Add Host flow, choose a nearby Bonjour host or enter its LAN address, then add the Tailscale/MagicDNS route. MacReacher tries the local route first and can fall back to the saved remote route.
4. Verify identity and sign in
On first connection, compare the fingerprint shown by the viewer with the Host window and approve only when every group matches. Credentials remain unsent until approval. Then use the Mac's current macOS username and password.
Do not forward the ports publicly
A private VPN route is the supported approach away from home. Avoid router port forwarding, public tunnel services and untrusted Wi-Fi for a first connection. Tailnet policy, device approval and account recovery remain your responsibility under Tailscale's terms.