Sign in to a site with MAX — no passwords, with a log and an access list
The visitor clicks “Sign in with MAX” and confirms in the Tuqo bot: no passwords, no codes. You see by name who signed in and when, and decide who gets in: everyone, only a list of IDs and phone numbers, or after your approval. The visitor shares the phone number with a button in the bot, and MAX itself confirms it, so nobody can enter someone else's.
In the panel, it's the Visibility tab on the site page.
How to turn it on
Turn on the MAX users mode
The Visibility tab on the site page. Available from the Pro plan or with the MAX sign-in add-on. You don't need your own bot: sign-in goes through the Tuqo bot.
Decide whether you need a phone number
Turn on the phone request, and the visitor shares the number with a button in the bot. MAX confirms the number, and the visitor sees that you will get it before signing in.
Choose who gets in
Everyone who confirms, only a list of IDs and phones (up to a thousand entries, pasted as a list), or each person after your approval.
Send the link
The site address stays the same. The panel shows the participant list: name, ID, phone and sign-in time, with blocking and CSV export.
When it fits. When your people are already in MAX: company employees, community members, clients. You need to let your people in and keep others out, without sending passwords around or keeping email lists. MAX is a Russian messenger, so this mode is mostly for audiences in Russia.
What the visitor sees
The site address doesn't change — only what a person without a pass sees does.
Opens the site
Sees your login screen and a “Sign in with MAX” button. The screen also says what the site owner will see: name, ID and, if needed, the phone number.
Confirms in the bot
The button opens the Tuqo bot in MAX: “Sign in” or “Share my number and sign in”. If the person is not on the list, the bot says so and shows their ID.
Comes back to the site
The page opens by itself. The pass lasts up to 30 days; a person you block loses access immediately.
What's included
How people use it
Company employees
An internal directory, schedules, instructions: admit people by a list of work phone numbers and see who opened it.
A site in a bot's mini app
The site opens from your bot in MAX, and the sign-in is confirmed in the chat with the Tuqo bot. With list admission, only your people see the site, wherever the link is opened.
A private community
A club, team or course: entry by approval, without keeping email lists. You see each newcomer before they get in.
Materials for clients
Prices and terms for your own people: with list or approval admission a person signs in with their MAX account, and a forwarded link won't open the site for others.
Other modes and guides
MAX users: frequently asked questions
Do I need my own bot in MAX? +
No. Sign-in is confirmed in the Tuqo bot; we don't ask for or store bot tokens. If the site opens as your bot's mini app, sign-in goes the same way: the button leads to the chat with the Tuqo bot, the person confirms and comes back.
What does the site owner see? +
The MAX name and ID, the phone number (if you ask for it and the person shares it), and the first and last sign-in time. The visitor sees this list on the login screen and in the bot before confirming.
Can the phone number be faked? +
No. The number is shared with the “Share my number” button and signed by MAX, and we check the signature. Typing in someone else's number or forwarding someone else's contact won't work.
Can the site open only inside MAX? +
No, on purpose. Reliably checking that a page is open in the app is only possible with the key of the bot the mini app runs in, and we don't store your bots' tokens. Admission by list works anywhere instead: only your people see the site, whether they open it in MAX or in a browser.
How do I admit only my employees? +
Turn on the phone request, choose “Only people on the list” and paste work phone numbers, one per line, in any usual format: +7, 8 or without the country code. People not on the list are turned away by the bot and shown their MAX ID, so you can add them by it.
What happens if I delete or block a participant? +
Blocking closes access at once and keeps the person out. Someone removed from the access list is signed out at once too. Deleting erases the name, ID and phone; the person can sign in again only if the mode's rules let them.
What about Telegram? +
MAX only for now. For Telegram channel subscribers there is the Subscribers only mode.
Which plan includes it? +
The Pro plan and up. On lower plans, use the MAX sign-in add-on at 299 ₽/mo per site.
A site only your people can see
MAX users: Pro plan or 299 ₽/mo add-on. Your own login screen, every file protected, no server to run.