diff --git a/security/tailscale/Makefile b/security/tailscale/Makefile
index 6c95b7cd0e..67a3f4be5d 100644
--- a/security/tailscale/Makefile
+++ b/security/tailscale/Makefile
@@ -1,5 +1,5 @@
PLUGIN_NAME= tailscale
-PLUGIN_VERSION= 1.3
+PLUGIN_VERSION= 1.4
PLUGIN_COMMENT= VPN mesh securely connecting clients using WireGuard
PLUGIN_DEPENDS= tailscale
PLUGIN_MAINTAINER= sam@sheridan.uk
diff --git a/security/tailscale/pkg-descr b/security/tailscale/pkg-descr
index b2066fa79c..2676046f4f 100644
--- a/security/tailscale/pkg-descr
+++ b/security/tailscale/pkg-descr
@@ -6,6 +6,10 @@ https://tailscale.com/
Plugin Changelog
================
+1.4
+
+* set pre-auth key field in UI to optional, enables registration via pre-auth key or AuthURL from status page
+
1.3
* modify RC script to prevent re-using auth key if already authenticated
diff --git a/security/tailscale/src/opnsense/mvc/app/controllers/OPNsense/Tailscale/forms/authentication.xml b/security/tailscale/src/opnsense/mvc/app/controllers/OPNsense/Tailscale/forms/authentication.xml
index b2bcae8b3a..bba0c86af6 100644
--- a/security/tailscale/src/opnsense/mvc/app/controllers/OPNsense/Tailscale/forms/authentication.xml
+++ b/security/tailscale/src/opnsense/mvc/app/controllers/OPNsense/Tailscale/forms/authentication.xml
@@ -9,6 +9,6 @@
authentication.preAuthKey
text
- Use a non-reusable auth key and disable expiration
+ Use a non-reusable auth key and disable expiration (optional). If not specified use AuthURL from Status page
diff --git a/security/tailscale/src/opnsense/mvc/app/models/OPNsense/Tailscale/Authentication.xml b/security/tailscale/src/opnsense/mvc/app/models/OPNsense/Tailscale/Authentication.xml
index b1b404f48d..dce55a679c 100644
--- a/security/tailscale/src/opnsense/mvc/app/models/OPNsense/Tailscale/Authentication.xml
+++ b/security/tailscale/src/opnsense/mvc/app/models/OPNsense/Tailscale/Authentication.xml
@@ -8,7 +8,7 @@
Please enter a valid URL
- Y
+ N