All students must switch on MFA by 1 August 2026

From 1 August 2026, the university requires every student to switch on multi-factor authentication (MFA) on their university account. MFA adds a second check beyond your password, so someone who steals your password still cannot get into your email, your files, or the registrar's system.

What you need before you start#

• Your Thammasat email address, which looks like yourname.abc@dome.tu.ac.th, and its password.
• Your phone, with enough storage to install one small app.
• A computer, or a second device. It is much easier to scan the setup QR code with your phone while the code is on a different screen.

You can do the whole process on the phone alone, but pairing a computer with a phone makes scanning the QR code easier.

Step 1. Install Microsoft Authenticator on your phone#

Open the App Store (iPhone) or Google Play (Android) and search for Microsoft Authenticator. The publisher must be Microsoft Corporation. Many apps use similar names and icons, so check the publisher before you install.

Open the app once it is installed. Accept the privacy prompt, and skip the sign-in screen if it offers one. You do not add your account from inside the app. The following steps add it instead.

Step 2. Open your security info page#

On your computer, go to aka.ms/mfasetup.

Sign in with your full @dome.tu.ac.th address and your password. You land on a page titled Security info, which lists the ways you can prove your identity.

Step 3. Add Microsoft Authenticator as a sign-in method#

1. Select Add sign-in method.
2. Choose Authenticator app from the list.
3. Select Add. Microsoft shows a short "Start by getting the app" screen. You already have it, so select Next.
4. On the "Set up your account" screen, select Next again. A QR code appears on your computer screen. Leave it there.

Step 4. Scan the QR code with the app#

On your phone, open Microsoft Authenticator and follow these steps.

1. Tap the + button, usually at the top right.
2. Choose Work or school account.
3. Choose Scan QR code. Allow camera access if the phone asks.
4. Point the camera at the QR code on your computer screen.

Your account appears in the app's list as yourname.abc@dome.tu.ac.th. That is the pairing done.

Step 5. Approve the test sign-in#

Back on the computer, select Next. Microsoft sends a test notification to your phone and shows a two-digit number on the computer screen.

Open the notification on your phone, type that number into the app, and tap Yes or Approve. The computer confirms with Notification approved.

Step 6. Add a backup method#

Do not skip this. If you lose your phone, break it, or wipe it, a backup method keeps you out of the helpdesk queue.

On the Security info page, select Add sign-in method again and add Phone. Enter your mobile number with the country code, for example +66, and confirm the code that arrives by SMS.

While you are there, check the Default sign-in method near the top of the page. Set it to Microsoft Authenticator - notification, which is faster and safer than an SMS code.

What changes when you sign in from now on#

You will still type your password as usual. After that, roughly once per device and browser, Microsoft sends an approval to your phone with a two-digit number to type in. Approve it and you are through. On your own laptop you can tick Don't ask again for 60 days when it is offered.

If something goes wrong#

These problems have simple fixes.

• No notification arrives. Open Microsoft Authenticator manually and look for a pending request. If there is none, check that notifications are enabled for the app in your phone settings.
• The app shows a code but nothing to approve. Tap your account in the app to see the six-digit code, and type that code into the sign-in screen instead.
• You changed phones. Set the new phone up before you wipe the old one. If the old phone is already gone, sign in with your backup phone number and add the app again from the security info page.
• You are locked out completely. Contact the university's Office of Information and Communication Technology. They take support requests by email at ict.tu@tu.ac.th and on LINE at @icttuhelpdesk.

Why the university is doing this#

Passwords alone stop very little. Phishing emails that copy the Thammasat sign-in page are the most common way attackers take over student accounts, and a stolen password is enough on its own. With MFA switched on, the attacker still needs your phone, which they do not have. Ten minutes now saves a lot of trouble later.