These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
2 more ways to get ZeroTier One
Package managers
- Chocolatey
choco install zerotier-one - Homebrew
brew install --cask zerotier-one
About ZeroTier One
ZeroTier emulates an Ethernet switch across the internet. Join a network with its sixteen-digit ID and your machines get addresses on it and talk directly to each other, whatever network address translation is in the way. Traffic is encrypted end to end with keys only you hold, and most of it goes peer to peer.
Because it works at the Ethernet layer rather than the IP layer, broadcast-dependent protocols and network discovery work across sites. Access control rules allow fine-grained segmentation. Free accounts cover a useful number of devices, and the controller can be self-hosted.
Strengths
- Ethernet-level networking, so discovery and broadcast protocols work across sites
- End-to-end encryption with keys you control
- Traverses network address translation without port forwarding
- Windows, macOS, Linux, BSD, Android, iOS, routers and containers
Limitations
- An account with the hosted controller unless you run your own
- Relayed connections are free but slow when peer-to-peer fails
- Ethernet-level networking is more than most people need
- Some parts of the repository are not free software
Details
- Pricing
- FreemiumThe software is free and open source under the MPL 2.0. The hosted controller is free up to a device limit, with paid plans above that; the controller can also be self-hosted.
- License
- MPL-2.0
- Developer
- ZeroTier, Inc.
- Platforms
- Windows, macOS, Linux, Android, iOS
- How it runs
- Downloadable app
- Account
- Required
- Works offline
- Yes
- Best suited for
- Joining machines in different places into one flat network
- Categories
- VPN
- Last verified
- Added
- Provenance
- Selected from the TechWalrus downloads catalog (VPN); facts checked against the developer's own pages, 2 sources on file.
Alternatives to ZeroTier One
Compare allSoftware that can replace ZeroTier One for an important use case, and what changes if you switch.
Tailscale
Builds a private network between your own devices using WireGuard, without opening ports or running a server.
Tailscale builds a WireGuard mesh at the IP level rather than virtual Ethernet, with a free plan for up to 6 users and a hosted coordination server.
NetBird
A WireGuard-based mesh network with single sign-on, multi-factor authentication and access policies, self-hostable or managed.
NetBird is a WireGuard mesh with SSO, MFA and access policies that can be fully self-hosted under the AGPL, with no Ethernet-level broadcast support.
nebula
Connect devices through an encrypted overlay network.
Nebula is an MIT-licensed encrypted overlay with no hosted controller, but requires certificate management and has no iOS client listed.
Netmaker
Self-hosted platform for building and managing WireGuard mesh networks.
Netmaker is a self-hosted WireGuard mesh platform with an admin interface and private DNS, with some management features in commercially licensed paid tiers.
headscale
A self-hosted, open-source implementation of the Tailscale control server, so your mesh VPN does not depend on a company.
Headscale is a self-hosted Tailscale control server that works with standard Tailscale clients, giving a WireGuard mesh without any hosted account.
innernet
Private network manager built on WireGuard with peer invitations.
Innernet is an MIT-licensed WireGuard network manager with peer invitations and central access rules, but it is Linux focused and self-run.
ZeroTier One as an alternative
Listings that name ZeroTier One as an alternative.
Firezone
WireGuard-based zero trust access with self-hosted gateways.
ZeroTier One joins machines into a virtual Ethernet network with end-to-end encryption, working at the network level rather than per resource, with a hosted controller by default.
Twingate
An identity-based network access service meant to replace a traditional VPN for teams.
ZeroTier One joins machines into one virtual Ethernet network rather than granting per-resource access, and its controller can be self-run.
Similar software
Related functionality, not necessarily a direct replacement.
WireGuard
A small, fast VPN protocol and set of official clients that connect two machines by exchanging public keys.
Mullvad VPN
A flat-rate VPN service with anonymous account numbers instead of usernames, and open source apps.
OpenVPN Community
The VPN protocol and client that has been the default for two decades, and still runs on everything.
Netclient
Connect a machine to a Netmaker-managed network.
