# How do I log in to Headscale?

https://www.seturack.com/en/knowledgebase/article/how-to-log-in-to-headscale

1. In the panel, open **My servers** and click your server.
2. On the **Overview** tab, wait for the **App** row to say "Headscale is ready". The page refreshes itself.
3. Copy the values from the **Site address** and **Admin key** rows.
4. Install the official Tailscale client on the device you want to connect (Linux, macOS or Windows).
5. On the device, open a terminal and run: `tailscale up --login-server SITE-ADDRESS --authkey ADMIN-KEY`.
6. The device joins the network. You can use the same key for every device. To see the devices, connect with SSH, run `cd /opt/seturack/headscale`, then `docker compose exec headscale headscale nodes list`.

Further down the page, the **Username** row and the **Password** row below it are for SSH. Don't use them to log in to Headscale.

## Good to know

- Headscale has no web interface, devices and keys are managed with commands.
- Devices connect to each other directly. If a direct connection can't be made, traffic passes encrypted through Tailscale's public relay (DERP) servers.
- With your own domain, change Headscale's address too: set `server_url` in `/opt/seturack/headscale/ayar/config.yaml` to the new address and run `docker compose restart headscale` in `/opt/seturack/headscale`. Then run `tailscale up --login-server NEW-ADDRESS --authkey ADMIN-KEY --force-reauth` on each device.
- The site opens over HTTPS on a free `sslip.io` address based on your IP. If a certificate can't be issued, it opens over `http://` instead. Only ports 80, 443 and 22 (for SSH) are open to the outside.

To use your own domain, see [this article](https://www.seturack.com/en/knowledgebase/article/how-to-connect-your-own-domain).

**No server yet?** [Order a server with Headscale installed](https://www.seturack.com/en/headscale-vps): you choose the size and pay for what you choose.
