Team VPN · connect in 4 steps

Pick your device. Paste the server address John sent you. Keep Tailscale installed until John says otherwise. Need more detail? Open the full handbook.

Sign in with the exact email John invited, not another address and not Google or GitHub.

Your Windows PCInternetLab VPN · MFALab machines

1Accept John's invitation

JohnYour invite link →
Open John's linkIn any browser · expires in days
New password••••••••••Sign in
Set your own passwordUnique · save it in a manager
Authenticator123 456
Scan the MFA QR codeGoogle/Microsoft Authenticator, Authy…

No invitation yet? Send John this and wait for the link.

Please invite me to the team VPN. Name / Email / Device + OS / Servers needed

2Install on

docs.netbird.io/…/windows⤓ Download .exe
Edge: download the installer
User Account ControlDo you want to allow this appto make changes? NetBirdYesNo
Click Yes on the admin prompt
⊞^10:42NetBirdsystem tray icon
Icon appears in the system trayThen open PowerShell as Administrator
$ brew install --cask \ netbirdio/tap/netbird-ui🍺 netbird-ui installed
Terminal: brew installor the .pkg from the official page
“NetBird” wants to addVPN configurationsDon't AllowAllow
Allow the system promptsMac password may be asked
Finder File Edit10:42NetBirdmenu bar icon
Icon appears in the menu bar
$ curl -fsSL \ https://pkgs.netbird.io/install.sh | shInstalling netbird…
Paste the install command
[sudo] password for you: typing stays hidden
Enter your sudo passwordNothing shows while typing
$ netbird version0.80.0
InstalledNo browser here? Ask John for a key
Google PlayNetBirdNetBird GmbHInstallAndroid 8 or newer
Google Play → Install
You'll connect toNetBird Cloud(we change this next)Continue
Tap CONTINUE on the first screen
App StoreNetBirdUtilitiesGET
App Store → GET
Connectnot yet · first change the server
Open it, don't tap Connect yet
Open ↗
brew install --cask netbirdio/tap/netbird-ui
curl -fsSL https://pkgs.netbird.io/install.sh | sh

Already installed? Skip ahead. If it uses another NetBird network, ask John first.

3Connect on

Administrator: Windows PowerShellPS C:\> netbird up \ --management-url 'https://your-server…:443'Opening browser for login…
Paste into Administrator PowerShell
🔒 your-server.exampleSign inyou@lab · passwordMFA 123 456
Edge opens: sign in + MFAThen close the tab
⊞NetBird · Connectedright-click: Settings · Disconnect
Tray icon turns greenPrefer the app? Settings → server URL
$ sudo netbird up \ --management-url 'https://your-server…:443'Password: Opening browser for login…
Terminal: paste, enter Mac password
🔒 your-server.exampleSign inyou@lab · passwordMFA 123 456
Safari opens: sign in + MFA
ConnectedDisconnectSettings…Quit
Menu bar icon: Connected
$ sudo netbird up \ --management-url 'https://your-server…:443'Please do the SSO login in your browser
Paste into Terminal
If no browser opens, open this link:https://your-server…/login?code=…Sign in + MFA, then come back.
Browser opens (or a link is printed)Sign in + MFA
$ netbird statusManagement: ConnectedNetBird IP: 100.x.x.x
Terminal says Connected
NetBirdPeersChange ServerSettingsLog out1
☰ menu → Change ServerConfirm the warning (clears defaults)
Change Serveryour-server.exampleCancelChange2
Paste the address → CHANGE
Connection requestNetBird wants to set up aVPN connectionCancelOK3
Tap the big button → OKDisconnect Tailscale first
🔒 your-server.exampleSign inyou@lab · passwordMFA 123 456Chrome opens · then back to the app4
Chrome: sign in + MFA
SERVERChange Server›About›1
Settings ⚙ → Change ServerLabel may differ by version
Server addressyour-server.exampleCancelSave2
Paste the address → Save
Connect“NetBird” Would Like toAdd VPN ConfigurationsDon't AllowAllow3
Tap Connect → AllowFace ID / passcode may be asked
Sign inyou@lab · passwordMFA 123 456🔒 your-server.example4
Safari: sign in + MFAThen back to the app
(paste the address above first)
Only one VPN can be active on a phone: disconnect Tailscale there first.

4Check on , then tell John

PS C:\> netbird statusManagement: ConnectedSignal: ConnectedNetBird IP: 100.x.x.x
PowerShell: netbird status
$ netbird statusManagement: ConnectedSignal: ConnectedNetBird IP: 100.x.x.x
Terminal: netbird statusor click the menu bar icon
$ netbird statusManagement: ConnectedSignal: ConnectedNetBird IP: 100.x.x.x
Terminal: netbird status
🔑 10:42Connected100.x.x.x
App shows Connected + IPKey icon 🔑 in the status bar
VPN10:42Connected100.x.x.x
App shows Connected + IPVPN badge in the status bar
my-windows-pc100.x.x.x
Send John: name + IPPrivately, not in a group chat
lab groupJohn adds your device → access opens
John assigns accessUntil then: connected, nothing reachable
netbird status
Your NetBird IP must start with the range John gave you — that proves you are on our server. Send John your device name + that IP.
IP starts with something else (e.g. 100.117.)? You signed in to a different NetBird network, usually the default NetBird Cloud. Go back to step 3, set our server address, and sign in with the account John invited. Keep Tailscale until John confirms your access.
All four steps done. John will assign your access and confirm.

Something failed?

Sign-in page won't load

Campus or office Wi-Fi may block our server. Sign in once on a phone hotspot, then tell John which network failed. Don't change proxy, DNS, or firewall settings.

Connected, nothing works

Expected until John assigns your device group. Send him the device name and NetBird IP.

“Invalid credentials”

Almost always the wrong email. Use exactly the address John invited (for example your work address, not Gmail, and not a shortened or lengthened version of your name). Only that address has an account. Need a different address? Ask John for a new invitation.

IP doesn't start with the range John gave you

The app is signed in to a different NetBird network (usually the default NetBird Cloud, or a Google/GitHub account). Disconnect, set the server to the address at the top (step 3), and sign in with the lab account John invited. Then send the new IP.

Certificate warning

Stop. Check the address matches the bar at the top, then ask John. Never bypass it.

VPN permission denied

Disconnect Tailscale or any other VPN on the phone, then tap the NetBird button again and allow the VPN prompt.

“Command not found”

Finish the install and open a new terminal window (PowerShell as Administrator).

“System extension blocked”

Open System Settings → Privacy & Security and allow NetBird, then try again.

Ping fails

Ping is blocked on purpose. Test the service John approved instead.

Send John your device, the step number, and the error text. Never send passwords, codes, invitation links, or private keys.

SSH after John grants access

John gives you three values: host, port, OS username. Use your own existing key.

On a phone use an SSH app (Termius, JuiceSSH, Blink) with those values.