“Tailscale has never supported password-based authentication.”
Tailscale started with Google and Microsoft logins, added GitHub, Apple and OIDC, and now passkeys. A passkey user gets a key pair unique to Tailscale and cannot be phished by a lookalike domain. Until now, a company that refused to store passwords made you borrow Google’s or Microsoft’s instead. Refusing passwords meant outsourcing your identity to Big Tech.