Skip to main content
TunnelFleet has two separate authentication layers: your dashboard account, and VPN user credentials on each server.

​
Dashboard authentication

TunnelFleet uses email and password authentication.

​
Organizations and roles

Every account belongs to at least one organization. Your personal organization is created at registration. See Organizations and Members for roles, invites, billing, and settings. Invite teammates by email. Roles control what members can do: URL pattern for org resources:

​
License and affiliate sign-in

If you purchased through a partner (for example AppSumo or StackSocial), redeem your license at the partner redeem page under /redeem/{vendor} instead of starting a normal paid trial.

​
VPN user authentication

VPN users are not TunnelFleet dashboard logins. They are credentials provisioned on a specific server for client apps. A default VPN user named tunnelfleet is created during server provisioning.
Treat VPN passwords and WireGuard private keys like secrets. Rotate credentials from the server Users tab if a device is lost.

​
Security recommendations

  • Enable 2FA on your TunnelFleet account
  • Prefer WireGuard for personal devices when clients support it
  • Use OpenVPN TCP on networks that block UDP VPN traffic
  • Revoke VPN users immediately when someone leaves your team
  • Keep root SSH on the VPS locked down (key-based SSH, no password login)

​
Next steps

Deploy your first server

Create a server and run the install script.