diff --git a/cmd/tailscale/cli/up.go b/cmd/tailscale/cli/up.go
index 06d9b5ff8..f737fe588 100644
--- a/cmd/tailscale/cli/up.go
+++ b/cmd/tailscale/cli/up.go
@@ -1198,7 +1198,8 @@ func resolveAuthKey(ctx context.Context, v, tags string) (string, error) {
 		},
 	}
 
-	authkey, _, err := tsClient.CreateKey(ctx, caps)
+	const defaultExpiry = 0
+	authkey, _, err := tsClient.CreateKey(ctx, caps, defaultExpiry)
 	if err != nil {
 		return "", err
 	}