# ZeroTier Published January 1, 2026 · Updated August 10, 2026 Global software-defined networking Category: Security & Privacy · Free · Open source · Replaces Tailscale ($5/user/month) · [Official website](https://zerotier.com) ## Install with Homebrew `brew install --cask zerotier-one` ## Quick take ZeroTier One remains a reliable Mac client for virtual Ethernet overlays in August 2026, with a maintained 1.16.x line and clear device-based cloud pricing. It is excellent for labs, mixed OS fleets, and LAN-shaped apps over the internet. Revisit Tailscale/NetBird if identity-first WireGuard UX or seat economics fit better. Best for: Homelabs needing simple cross-NAT Ethernet-style access, Mixed IoT + laptop fleets, Teams that prefer device-priced overlays ## What is ZeroTier One? ZeroTier One is the cross-platform client that joins your Mac (and nearly every other OS) to ZeroTier virtual networks. Where classic VPNs hairpin all traffic through a central concentrator, ZeroTier builds encrypted peer-to-peer paths that behave like a global virtual Ethernet switch, Layer 2 semantics, stable virtual MACs/IPs, and controllable bridging for labs and edge devices. As of August 2026 the supported desktop/mobile client line is ZeroTier One 1.16.x (1.16.2 released 20 May 2026), with macOS 10.13+ packages still published on the official download page. The control plane story evolved too: ZeroTier Central has a New Central experience for organizations created after 5 November 2025 alongside Legacy Central for older accounts. Pricing on the platform side is device-based: Personal free (10 devices, 1 network, 1 admin), Essential at $18/month for 10 devices ($2 per extra device), Scale at $179/month for 100 devices ($1.80 per extra device), plus Enterprise and Quantum custom tiers that include post-quantum-oriented options. On a Mac, ZeroTier One appears as a menu-bar app plus a background service. You paste a 16-digit Network ID, authorize the node in Central (or via API/automation), and traffic flows. Advanced users push managed routes, flow rules, and SSO-connected admin workflows on paid tiers. Competitors such as Tailscale, NetBird, and self-hosted Headscale remain the usual comparison set, especially after Tailscale's 2026 seat-pricing changes pushed some homelabs to re-evaluate device-priced meshes. ZeroTier One is actively developed, not discontinued. Choose it when you want Ethernet-like multiprotocol flexibility (including non-IP oddities in some setups), broad IoT/embedded reach, and a client that is thin enough to script. Choose something else when identity-first WireGuard meshes with MagicDNS ergonomics matter more than virtual L2. If you manage Macs, verify the app's Gatekeeper signature and grant Full Disk Access only when a workflow truly needs it. After major macOS upgrades, recheck Login Items and network extension approvals, and keep a known-good installer handy. Judge any networking or productivity tool on your own numbers: cold start, RAM use after an hour, extension or driver stability, and what the price looks like after a year of adding devices. Rely on the vendor docs and GitHub release notes first, pricing pages and download pages are the authority, not roundup posts. Treat chatter on X as a slow signal, pay attention when many people report breakage after an update, ignore single angry threads. For open source dependencies, confirm the project still tags releases, answers issues and ships security fixes, stars are not proof of maintenance. Apple Silicon runs native builds well, but Rosetta-only helpers can still hurt battery during long sessions. Keep your config in dotfiles or MDM, leave auto-updates on, use least privilege and phishing resistant auth where you can, and do not trust random mirrors. For CI, use short-lived joins so headless runners do not quietly inflate your device count toward Essential overage. If you advertise a LAN route from a Mac, mark which machine is the router, two routers fighting creates asymmetric routing. Export your Central network config when your plan allows, rebuilding flow rules from memory is painful. Remember iOS uses VPN profiles while macOS uses system extensions, so train users on both. Finally, price out 25, 50 and 100 devices against Tailscale seats before you standardize. ## Features - **Virtual Ethernet Overlay.** Creates global L2-ish networks so devices look local even across NATs and mobile networks. Useful for games, labs, and appliances that assume LAN semantics. - **Peer-to-Peer with Relays.** Nodes attempt direct paths and fall back to ZeroTier infrastructure when hole punching fails. Paid tiers expand relay and admin capabilities. - **Menu Bar Client + CLI.** On macOS, join/leave networks from the menu bar or automate with the zerotier-cli. Status, networks, and peers are inspectable without a heavy GUI suite. - **Central Authorization & Flow Rules.** Nodes must be authorized. Flow rules and managed routes let admins shape which peers talk, similar in spirit to a distributed firewall. - **Cross-Platform Reach.** Clients exist for macOS, Windows, Linux, iOS, Android, NAS appliances, and more, handy when your 'network' includes a Pi, a cloud VM, and a MacBook. - **1.16 Platform & Licensing Updates.** The 1.16 line brought licensing/model updates for bundling, mobile custom root sets, and continued macOS tun/tap polish through 1.16.2 fixes in May 2026. - **SSO & Admin Controls on Paid Plans.** Essential and above add business licensing features such as more networks/admins and OIDC-oriented admin patterns; Enterprise/Quantum expand compliance and sovereignty options. ## How to Install ZeroTier One on Mac Install the official PKG from zerotier.com/download or use package managers that track upstream. Current advertised macOS support starts at 10.13+. 1. **Download ZeroTier One.** Get the macOS PKG for version 1.16.x from https://www.zerotier.com/download/ and install it. 2. **Allow system extension / network permissions.** Approve prompts in System Settings so the virtual interface can run. On newer macOS releases, check Login Items and Network Extensions if join fails. 3. **Create or copy a Network ID.** In ZeroTier Central (New or Legacy, depending on account age), create a network and copy the 16-digit ID. 4. **Join and authorize.** From the menu bar choose Join Network, paste the ID, then authorize the device in Central before expecting traffic. 5. **Optional CLI checks.** Use `zerotier-cli status` and `zerotier-cli listnetworks` to verify online state and assigned addresses. ## Pros - Simple join UX for non-experts via Network ID - True multi-platform client including Mac menu bar - Virtual Ethernet flexibility beyond pure WireGuard L3 - Generous free 10-device Personal tier for labs - Active 1.16.x maintenance into 2026 ## Cons - Device pricing can exceed seat-priced meshes at scale - Free tier limited to one network and one admin - Central split (New vs Legacy) can confuse long-time users - Some enterprises prefer identity-first WireGuard ecosystems - Relay dependency when P2P fails can add latency ## Deep Dive: Client versus control plane Why ZeroTier One feels like a VPN app but is really a network hypervisor endpoint. ## FAQ ### Is ZeroTier One free? The client is free. Hosting free Personal networks allows 10 devices, 1 network, and 1 admin. Larger fleets need Essential, Scale, or Enterprise. ### What version should Mac users run in August 2026? Stay on the 1.16.x line; 1.16.2 (May 2026) is the current patch release called out in upstream notes and download pages. ### How is ZeroTier One different from ZeroTier the service? ZeroTier One is the on-device client. ZeroTier Central/plans are the coordination and commercial control plane that authorize members and store network config. ### Does it work on Apple Silicon? Yes. Official macOS packages support modern Macs; approve network extensions when prompted. ### ZeroTier vs Tailscale for a Mac lab? Pick ZeroTier for device-priced Ethernet-like overlays and mixed IoT; pick Tailscale for IdP-centric human access and MagicDNS ergonomics. ### What is New Central? Accounts/organizations created after 5 November 2025 use New Central (central.zerotier.com). Older accounts may still use Legacy Central (my.zerotier.com). ### Can I self-host? Self-hosted and sovereign options are primarily Enterprise/Quantum conversations rather than the free SaaS Personal plan. ## Sources - [ZeroTier Pricing](https://www.zerotier.com/pricing/) - [ZeroTier Downloads](https://www.zerotier.com/download/) - [ZeroTier One release notes](https://github.com/zerotier/ZeroTierOne/blob/dev/RELEASE-NOTES.md) - [Quickstart](https://docs.zerotier.com/quickstart/) - [New ZeroTier Central blog](https://www.zerotier.com/blog/meet-the-new-zerotier-central-a-smarter-cleaner-way-to-manage-networks/) - [NetBird ZeroTier alternatives context](https://netbird.io/knowledge-hub/top-5-zerotier-alternatives) ## Related - [1Password](https://bundl.run/apps/1password) - [Tailscale](https://bundl.run/apps/tailscale-app) - [Bitwarden](https://bundl.run/apps/bitwarden) - [KeePassXC](https://bundl.run/apps/keepassxc) - [ExpressVPN](https://bundl.run/apps/expressvpn) - [LastPass](https://bundl.run/apps/lastpass) - [ZeroTier vs Tailscale](https://bundl.run/compare/tailscale-vs-zerotier) - [ZeroTier vs Pangolin](https://bundl.run/compare/pangolin-vs-zerotier) - [Free alternative to Tailscale](https://bundl.run/https:/) ```json { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://bundl.run/#organization", "name": "Bundl.run", "url": "https://bundl.run", "logo": { "@type": "ImageObject", "url": "https://bundl.run/og-image.png", "width": 1200, "height": 630 }, "description": "The Ninite for Mac. Install all your essential Mac apps with one terminal command.", "sameAs": [ "https://github.com/abhiofficial/bundl-mac-setup", "https://x.com/bundlrun", "https://www.producthunt.com/products/bundl-run" ], "foundingDate": "2024", "contactPoint": { "@type": "ContactPoint", "contactType": "customer support", "url": "https://bundl.run/faq" } }, { "@type": "WebSite", "@id": "https://bundl.run/#website", "name": "Bundl.run", "url": "https://bundl.run", "description": "The Ninite for Mac. Install all your essential Mac apps with one terminal command.", "publisher": { "@id": "https://bundl.run/#organization" }, "inLanguage": "en-US" }, { "@type": "Person", "@id": "https://bundl.run/authors/sam-patel#person", "name": "Sam Patel", "jobTitle": "Security & Privacy Researcher", "url": "https://bundl.run/authors/sam-patel", "worksFor": { "@id": "https://bundl.run/#organization" }, "description": "Sam Patel is a cybersecurity professional specializing in application security, privacy tools, and secure software practices. With over 9 years in information security—including roles at security firms and as an independent consultant—Sam evaluates applications for security vulnerabilities, data handling practices, and privacy implications. Sam holds multiple security certifications and regularly presents at security conferences. Each review includes assessment of encryption methods, data collection policies, and potential privacy concerns that users should understand.", "knowsAbout": [ "Security Software", "Privacy Tools", "Network Security", "Password Managers", "VPNs & Encryption", "macOS Security Hardening" ], "image": "https://bundl.run/authors/sam-patel.svg" }, { "@type": "BreadcrumbList", "@id": "https://bundl.run/apps/zerotier-one#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://bundl.run" }, { "@type": "ListItem", "position": 2, "name": "Apps", "item": "https://bundl.run/apps" }, { "@type": "ListItem", "position": 3, "name": "ZeroTier", "item": "https://bundl.run/apps/zerotier-one" } ] }, { "@type": "WebPage", "@id": "https://bundl.run/apps/zerotier-one", "url": "https://bundl.run/apps/zerotier-one", "name": "ZeroTier for Mac", "description": "Global software-defined networking", "isPartOf": { "@id": "https://bundl.run/#website" }, "publisher": { "@id": "https://bundl.run/#organization" }, "inLanguage": "en-US", "datePublished": "2026-01-01T00:00:00Z", "dateModified": "2026-08-10T13:34:04.000Z", "author": { "@id": "https://bundl.run/authors/sam-patel#person" }, "mainEntity": { "@id": "https://bundl.run/apps/zerotier-one#software" }, "breadcrumb": { "@id": "https://bundl.run/apps/zerotier-one#breadcrumb" } }, { "@type": "SoftwareApplication", "@id": "https://bundl.run/apps/zerotier-one#software", "name": "ZeroTier", "description": "Global software-defined networking", "applicationCategory": "SecurityApplication", "operatingSystem": "macOS", "url": "https://bundl.run/apps/zerotier-one", "image": { "@type": "ImageObject", "url": "https://img.logo.dev/zerotier.com", "caption": "ZeroTier app icon for Mac" }, "sameAs": [ "https://zerotier.com/", "https://formulae.brew.sh/cask/zerotier-one" ], "review": { "@type": "Review", "author": { "@id": "https://bundl.run/authors/sam-patel#person" }, "reviewBody": "ZeroTier One remains a reliable Mac client for virtual Ethernet overlays in August 2026, with a maintained 1.16.x line and clear device-based cloud pricing. It is excellent for labs, mixed OS fleets, and LAN-shaped apps over the internet. Revisit Tailscale/NetBird if identity-first WireGuard UX or seat economics fit better." }, "about": { "@type": "Thing", "name": "ZeroTier", "description": "Global software-defined networking" }, "isPartOf": { "@id": "https://bundl.run/#website" } }, { "@type": "Article", "@id": "https://bundl.run/apps/zerotier-one#article", "headline": "ZeroTier for Mac — Full Review & Installation Guide 2026", "description": "ZeroTier One remains a reliable Mac client for virtual Ethernet overlays in August 2026, with a maintained 1.16.x line and clear device-based cloud pricing. It is excellent for labs, mixed OS fleets, and LAN-shaped apps over the internet. Revisit Tailscale/NetBird if identity-first WireGuard UX or seat economics fit better.", "image": "https://img.logo.dev/zerotier.com", "author": { "@id": "https://bundl.run/authors/sam-patel#person" }, "publisher": { "@id": "https://bundl.run/#organization" }, "datePublished": "2026-01-01T00:00:00Z", "dateModified": "2026-08-10T13:34:04.000Z", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://bundl.run/apps/zerotier-one" }, "articleSection": "SecurityApplication", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".key-facts" ] }, "about": { "@type": "SoftwareApplication", "name": "ZeroTier", "url": "https://bundl.run/apps/zerotier-one" }, "mentions": [ { "@type": "SoftwareApplication", "name": "Tailscale" } ] }, { "@type": "FAQPage", "@id": "https://bundl.run/apps/zerotier-one#faq", "mainEntity": [ { "@type": "Question", "name": "Is ZeroTier One free?", "acceptedAnswer": { "@type": "Answer", "text": "The client is free. Hosting free Personal networks allows 10 devices, 1 network, and 1 admin. Larger fleets need Essential, Scale, or Enterprise." } }, { "@type": "Question", "name": "What version should Mac users run in August 2026?", "acceptedAnswer": { "@type": "Answer", "text": "Stay on the 1.16.x line; 1.16.2 (May 2026) is the current patch release called out in upstream notes and download pages." } }, { "@type": "Question", "name": "How is ZeroTier One different from ZeroTier the service?", "acceptedAnswer": { "@type": "Answer", "text": "ZeroTier One is the on-device client. ZeroTier Central/plans are the coordination and commercial control plane that authorize members and store network config." } }, { "@type": "Question", "name": "Does it work on Apple Silicon?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Official macOS packages support modern Macs; approve network extensions when prompted." } }, { "@type": "Question", "name": "ZeroTier vs Tailscale for a Mac lab?", "acceptedAnswer": { "@type": "Answer", "text": "Pick ZeroTier for device-priced Ethernet-like overlays and mixed IoT; pick Tailscale for IdP-centric human access and MagicDNS ergonomics." } }, { "@type": "Question", "name": "What is New Central?", "acceptedAnswer": { "@type": "Answer", "text": "Accounts/organizations created after 5 November 2025 use New Central (central.zerotier.com). Older accounts may still use Legacy Central (my.zerotier.com)." } }, { "@type": "Question", "name": "Can I self-host?", "acceptedAnswer": { "@type": "Answer", "text": "Self-hosted and sovereign options are primarily Enterprise/Quantum conversations rather than the free SaaS Personal plan." } } ], "isPartOf": { "@id": "https://bundl.run/apps/zerotier-one" } }, { "@type": "ItemList", "name": "ZeroTier Video Tutorials", "description": "Tutorial videos for learning ZeroTier on Mac", "itemListElement": [ { "@type": "ListItem", "position": 1, "item": { "@type": "VideoObject", "name": "ZeroTier Simple Network Setup", "description": "Curious about ZeroTier networking? The following demo walks you through the process of setting up a simple network with ZeroTier. This short video, an excerpt from a livestream presentation for the IB", "thumbnailUrl": "https://i.ytimg.com/vi/EPYUOkxgiCA/mqdefault.jpg", "uploadDate": "2021-12-07T03:16:05Z", "duration": "PT4M8S", "embedUrl": "https://www.youtube.com/embed/EPYUOkxgiCA", "interactionStatistic": { "@type": "InteractionCounter", "interactionType": "https://schema.org/WatchAction", "userInteractionCount": 77816 } } }, { "@type": "ListItem", "position": 2, "item": { "@type": "VideoObject", "name": "How to Setup and Use ZeroTier - What is it and how does it work?", "description": "In this video, I show you how to create an account, install zerotier on an endpoint (computer), configure the admin portal to allow the connection, and more! Please be sure to like and subscribe for m", "thumbnailUrl": "https://i.ytimg.com/vi/jMHUcp1Ea84/mqdefault.jpg", "uploadDate": "2022-08-10T19:16:28Z", "duration": "PT13M20S", "embedUrl": "https://www.youtube.com/embed/jMHUcp1Ea84", "interactionStatistic": { "@type": "InteractionCounter", "interactionType": "https://schema.org/WatchAction", "userInteractionCount": 42243 } } }, { "@type": "ListItem", "position": 3, "item": { "@type": "VideoObject", "name": "Work Remotely Using ZEROTIER & Remote Desktop / Securely connect with zero config !", "description": "In this video, i will explain how connect from a remote PC or Smartphone to your office server . Securely connect.(VPN) in few minutes. No need for fancy firewalls or complex configurations.", "thumbnailUrl": "https://i.ytimg.com/vi/73fyDWz6GQ0/mqdefault.jpg", "uploadDate": "2021-12-17T22:46:34Z", "duration": "PT6M5S", "embedUrl": "https://www.youtube.com/embed/73fyDWz6GQ0", "interactionStatistic": { "@type": "InteractionCounter", "interactionType": "https://schema.org/WatchAction", "userInteractionCount": 5466 } } }, { "@type": "ListItem", "position": 4, "item": { "@type": "VideoObject", "name": "\"ZeroTier Remote Desktop Setup – Easy & Secure!\"", "description": "How to Set Up ZeroTier for Remote Desktop Access Anywhere | Full Guide! Want to access your computer from anywhere in the world? 🌎 ZeroTier makes it easy to create a secure, private VPN for remote de", "thumbnailUrl": "https://i.ytimg.com/vi/EQtRX55DPIc/mqdefault.jpg", "uploadDate": "2025-03-16T13:48:56Z", "duration": "PT8M4S", "embedUrl": "https://www.youtube.com/embed/EQtRX55DPIc", "interactionStatistic": { "@type": "InteractionCounter", "interactionType": "https://schema.org/WatchAction", "userInteractionCount": 8672 } } }, { "@type": "ListItem", "position": 5, "item": { "@type": "VideoObject", "name": "MikroTik and Zerotier", "description": "Finally, the video you have been asking for. How to quickly set up Zerotier in a MikroTik router. ARM/ARM64 MikroTik router required for this tutorial.", "thumbnailUrl": "https://i.ytimg.com/vi/60uIlyF8Z5s/mqdefault.jpg", "uploadDate": "2022-10-14T05:58:28Z", "duration": "PT5M16S", "embedUrl": "https://www.youtube.com/embed/60uIlyF8Z5s", "interactionStatistic": { "@type": "InteractionCounter", "interactionType": "https://schema.org/WatchAction", "userInteractionCount": 113656 } } } ], "numberOfItems": 5 } ] } ```