Written 6 Sep 2026. This is a how-to, not a product card.

Open the house share from away

Open the house folder from a coffee shop or cellular without forwarding SMB. Put Tailscale on the computer and on your laptop or phone. Free personal plan is enough.

Haven't made the house folder yet? Start with a file share. Opening it only on house Wi-Fi? That quieter walk is open the house share from a laptop or open the house share from a phone. Need Tailscale for SSH first? SSH from away is the same private path — this note reuses that address for the folder.

Skip until the share and Tailscale both work

If Finder or File Explorer cannot open the folder on house Wi-Fi, fix that first. If you never installed Tailscale, do the install walk in SSH from away until tailscale ip -4 prints a 100.x.y.z address and both ends show Connected. Tailscale will not invent a missing Samba share. Don't open ports 445 or 139 on the router "just to test."

What this is

Same house folder. Same Samba username and share password. Different number. On the couch you use the house address (192.168…). Away from home you use the computer's Tailscale address (100.x.y.z). The laptop or phone reaches that private path over Tailscale. SMB stays on the computer. The public internet never gets a forwarded file-share port. Free personal Tailscale covers a handful of devices. You don't need a cloud sync app, a NAS remote kit, or subnet routing on day one.

Step 1: write down the Tailscale address

On the computer (SSH from the house is fine):

tailscale status

tailscale ip -4

Write down the 100.x.y.z number. That is the address you type into Finder, File Explorer, or Files — not the house 192.168…. Leave MagicDNS off until this number opens the folder once.

Step 2: prove the share still opens on the house network

Still on house Wi-Fi, open the folder the way you already do. Windows path bar:

\\192.168.1.50\photos

Mac Finder → Go → Connect to Server:

smb://192.168.1.50/photos

Swap the number and share name for yours. If that fails, stop here and use when the house share won't open. Away-from-home will not fix a broken share.

Step 3: open the same folder with the Tailscale number (still at home)

Still on house Wi-Fi, with Tailscale Connected on the laptop, try the Tailscale address first. Windows:

\\100.x.y.z\photos

Mac:

smb://100.x.y.z/photos

Sign in with the same Samba username and share password you already use on the house address. First connect may ask you to trust the server again — that is normal when the address string is new. Copy one small file in and out. If this fails while house 192.168… still works, check tailscale status on both ends, then whether ufw hid SMB on the Tailscale interface: turn on a simple firewall without locking yourself out. Samba usually listens on every interface; a locked interfaces = line in smb.conf is the other common culprit.

Step 4: prove it from away

Leave house Wi-Fi. Join coffee-shop Wi-Fi, or turn Wi-Fi off and use cellular (phone hotspot is fine). Confirm the laptop Tailscale client is Connected. Open the same Tailscale path again:

\\100.x.y.z\photos

or

smb://100.x.y.z/photos

Same folder, same password. That is the whole job. When you are back on the couch, the old house address still works. Keep both.

Phone from away

Install Tailscale from the App Store or Google Play. Sign in with the same account. Turn the VPN toggle on. Then open the share the same way as on house Wi-Fi, but with the Tailscale number: open the house share from a phone. On iPhone Files, Connect to Server with smb://100.x.y.z/photos. On Samsung My Files, add the network drive with that address. On a Pixel, Material Files still works — same address, same share password. Captive portals sometimes block traffic until you accept the terms in a browser. Sign into the portal first, then retry Tailscale.

If it fails only away from home

If house SMB still works and Tailscale SSH also works, but the folder hangs from the coffee shop, wait a minute — some networks are rude to UDP and Tailscale falls back slowly. Confirm the VPN toggle is on. Don't type the house 192.168… address while you are away; that number only exists on the house LAN. If Tailscale itself never shows Connected, use when Tailscale won't connect. If the computer slept, that is is it still on?, not a share bug. If the folder opens but copies crawl on cellular, that is the phone's data path — a coffee-shop cable on a laptop is calmer for big photo dumps.

What this is not

This is not forwarding SMB on the router. It is not a reason to put Samba on the public internet. It is not Tailscale subnet routing or "expose the whole house LAN" on day one. It is not Dropbox, iCloud, or a NAS remote-access subscription. Stay on the free personal plan until you actually need more devices.

What next

Prefer SSH over the same private path: SSH from away. Client stuck? When Tailscale won't connect. House Wi-Fi only is still open the house share from a laptop and open the house share from a phone. Forgot the share password? Set or change the house-share password. Folder won't open on the house network either? When the house share won't open. Want a second copy of the folder at home: a backup of the house folder.

Optional: jot which devices you put on the tailnet in Lab plan — username + passkey, no email. Skip if you just want to keep reading.

Skip

• Skip this until the house share already opens once on house Wi-Fi.
• Skip this until Tailscale shows Connected on the computer and on your laptop or phone.
• Skip forwarding ports 445 or 139 on the router.
• Skip subnet routers and "expose the whole LAN" on day one.
• Skip a paid Tailscale plan for one PC and one laptop.
• Skip a cloud sync app just to grab one photo from away.
• Skip this if you never leave the house and couch SMB is enough.