Knowledge Base · Networking & security
How to access your home server from anywhere
By Tiny · how I pick
Use a private VPN. Tailscale is the easiest, and plain WireGuard works if you'd rather run it all yourself. Either way, your devices reach the server from anywhere while nothing is exposed to the public internet.
For putting one web app online for other people, Cloudflare Tunnel is a good option. Whatever you choose, don't open ports on your router straight to home services. That's the classic way home servers get broken into.
Words you'll see in this guide
- Port forwarding: telling your router to let outside internet traffic reach a device in your home.
- VPN: a private, encrypted tunnel between devices over the internet.
- Mesh VPN: a private network where each of your devices connects directly to the others, like Tailscale.
- Tailscale: a free app that lets your own devices reach each other securely from anywhere, without opening your home network to the internet.
- Cloudflare Tunnel: a free service that makes an app running at home reachable from anywhere, without opening ports on your router.
Why not just forward a port?
Port forwarding opens a hole in your router that exposes an app directly to the whole internet. Automated bots scan the internet constantly. When they find an app with a default password or a known security flaw, they get in.
It's the most common beginner security mistake, and you don't need to make it. The safe options are also the easier ones.
The options, easiest first
Tailscale
- Install Tailscale on your server.
- Install it on your phone or laptop.
- Sign in to the same account on each.
Your devices can now reach each other from anywhere, as if they were on your home network. No router settings, no open ports, nothing public. It's free for personal use and takes about five minutes.
WireGuard
WireGuard is the fast, modern VPN technology Tailscale is built on. Running it yourself means you don't rely on any outside service. It takes more setup: you create keys and open one port for the VPN itself. Pick it if you want full control, and Tailscale if you don't.
Cloudflare Tunnel
If you want an app anyone can reach, like a public site or a page for family who won't install a VPN, Cloudflare Tunnel puts just that app online through Cloudflare without opening router ports. You can add a login page in front of it.
I use a Cloudflare Tunnel to reach the Ollama AI server at my house when I'm out. Use a tunnel when you need a web address. Use a VPN when access is just for you.
- Access for you and your household: Tailscale.
- Something other people need to reach: Cloudflare Tunnel.
Quick answers
How do I access my home server from outside my network?
Use a private VPN such as Tailscale or WireGuard. Your devices reach the server from anywhere without exposing anything to the public internet. For one public web app, use Cloudflare Tunnel.
Is port forwarding safe for a home server?
Generally no, especially for beginners. It exposes the app directly to the whole internet, and anything with a default password or an unpatched flaw can be found by bots quickly.
What is the easiest way to access a home server remotely?
Tailscale. Install it on your server and your devices, sign in, and they can reach each other from anywhere with no router setup. It's free for personal use.
Where to go next
- Remote access is one of the first services to set up, along with an ad blocker and monitoring.
- Need a low-power box to run it on? See the best mini PC under $300, or work out what kind of server you need.
Free email updates
I'm writing up exactly how I reach my home AI server from my phone. Subscribe and I'll send it when it's ready.
No spam. Unsubscribe anytime. Privacy policy.