Your tablet reaches your Mac even on mobile data or another Wi-Fi network. This page explains how it is set up, why your own account is asked for, and what the security rests on.
Tailscale builds an encrypted private network that connects only your own devices. They find each other over the internet and open an end-to-end encrypted connection between them. Codeyzer Screen embeds this networking layer inside the app — you do not install a separate one. Its free tier is enough for personal use. The component is open source; what we keep is in our privacy policy, and Tailscale’s own policy is at tailscale.com/privacy.
Because we run no backend. The network is yours and the account is yours; picture and input flow directly between your devices. If we ran a server your traffic would pass through it — and that is exactly what we avoided when building this.
In the Mac app, turn on Remote access. The approval happens in your browser, on Tailscale’s own page — you never type your password into our app.
In Settings › Devices, pick which tablet to include. Turning the general setting on does not include any tablet by itself — each device is chosen separately.
The tablet only needs to be connected to the Mac at that moment; you give its approval from the same place, in the browser. There is nothing to turn on from the tablet.
Doing this once while you are at home is enough; after that the tablet connects the same way from another network. The connection comes up even when your Mac is locked or its lid is closed.
You can take access away whenever you like: a tablet you included appears as a device on your own network, and removing it from the Tailscale admin console is enough — the app reconciles its state with that.
The switch on a device that has joined, on the other hand, turns on but does not turn off.
Here is why: a “remove” command sent from the app would need the tablet’s cooperation. If the tablet is switched off, lost or stolen, that command does nothing — while you believe the device is gone. Removing it from the console invalidates the key on the server side, so the result holds even when the device cannot be reached.
Your Mac does not open a door to the internet: the service port is visible only on your local network and your own encrypted network, never directly from the internet.
No port forwarding, NAT rule or dynamic DNS is needed — there is no surface left to misconfigure.
Access is limited to devices enrolled in your own network, with the app’s own device pairing on top of that.
When a direct connection cannot be made, traffic falls back to a relay server. Because the encryption is end to end, the content cannot be read there either; only latency and bandwidth are affected.
If your tablet is on the same network as your Mac, you do not need remote access: a cable or the same Wi-Fi already connects them. Remote access only comes in when the networks differ — and then smoothness follows the internet connection in between, while a cable and local Wi-Fi remain the smoothest paths.
Remote access is optional; it stays idle until you turn it on.
