tuqo
Gated access · Email code mode

Access by email list: a code in the inbox instead of a shared password

There is no shared secret. A visitor enters their address, gets a six-digit code by email and signs in. Only addresses on your list get in — access is tied to a person, not to a password anyone can forward.

Get started Pricing → Pro plan or 299 ₽/mo add-on

In the panel, it's the Visibility tab on the site page.

How to turn it on

1

Turn on Email code mode

The Visibility tab on the site page. Included from the Pro plan, or as a 299 ₽/mo add-on for one site (password mode included).

2

Add addresses

One at a time or paste a whole list — separated by commas, semicolons or new lines. Up to 1,000 addresses per site.

3

Label rows with names

The log then shows “Irina, accounting”, not a faceless mailbox.

4

Send the link

There is no password to pass on: the code arrives by email at the moment of sign-in.

When it fits. When there are many recipients and the group changes: a course cohort, a department, a list of investors. Someone leaves — delete their line, and nobody else notices.

What the visitor sees

The site address doesn't change — only what a person without a pass sees does.

Opens the link

Sees your login screen with an email field. No sign-up, no passwords to invent.

Enters their email

If the address is on the list, an email with a six-digit code arrives. The code is valid for ten minutes.

Enters the code and signs in

The pass lasts up to 30 days on that device, so there is no need to request a code every day.

What's included

Up to 1,000 addresses per site: one at a time or pasted as a list
A name next to each address — the log shows a person, not a mailbox
See who signed in, when, and on how many devices
Attempts from unlisted addresses go to a separate log: you see who tried to get past the list
Remove an address — one person loses access, the rest don't notice
The code is valid for ten minutes and burns after three wrong entries
After sign-in, the pass lasts up to 30 days and works only on your site
Every file is protected: pages, images, PDFs
Access period and open limit — same as with a password
Your own login screen: logo, title, description
A gated site isn't indexed by search engines
An AI agent can manage the address list over MCP and the REST API

How people use it

Course materials

Access by the list of students. Someone leaves — delete the line; no need to send a new password to the whole group.

Internal handbooks

Policies and price lists for your team: the site lives at a normal address but opens only for employees on the list.

Investor data room

The deck and the numbers, by a list of addresses. The log shows who opened it and when — more useful than any “delivered” mark.

Reviews with several people

Everyone signs in with their own address. No hunting for whose password leaked into a group chat — there is no shared password at all.

Other modes and guides

Email code: frequently asked questions

Do visitors need to sign up? +

No. They enter their address and the code from the email — that's it. No password, no account, no phone verification.

What if the code email doesn't arrive? +

The visitor can request the code again from the same screen. Emails go out from a Tuqo address as soon as the code is requested. If the address isn't on the list, no email is sent at all, so a stranger can't tell whether they are on the list.

How do I revoke access for one person? +

Delete their line from the list. Their pass stops working; everyone else keeps signing in as before.

How many addresses can I add? +

Up to 1,000 per site. Add them one at a time or paste a list, separated by commas, semicolons or new lines.

Can I see who signed in? +

Yes: the log shows who signed in, when, and how many devices each address uses. Sign-in attempts from addresses that aren't on the list are shown separately.

How long does a sign-in last? +

A pass on a device lasts up to 30 days — longer than with a password: access is already tied to a specific address, and requesting a code every week gets tiring.

How secure is it? +

The code is valid for ten minutes and burns after three wrong entries. Code requests are rate-limited, and after sign-in the visitor browses with a signed cookie that works only on your site.

Which plan do I need? +

The Pro plan or higher. On lower plans, turn it on with the Email code add-on for 299 ₽/mo per site; it includes password mode.

A site only your people can see

Email code: Pro plan or 299 ₽/mo add-on. Your own login screen, every file protected, no server to run.