Reaching Thai Work Systems From Abroad: A Traveler's Guide

Almost everyone has had the message arrive on day three of a holiday: "Can you just check this file?" Or you are on a business trip, and you need your company email, the HR portal for a leave request, the payroll page for a payslip, or a shared cloud drive for a presentation. At home in Thailand these systems open without a thought. Abroad they may ask for extra verification, load slowly, or refuse to open at all.

This guide is for Thai employees who need to reach work systems from another country. It explains the difference between a company VPN and a personal VPN, why some systems react to foreign logins, how to keep OTP codes working while roaming, how to use hotel Wi-Fi sensibly, and how to look after work files on devices you do not control. It is general information. Your employer's IT policy always comes first, and nothing here is advice on getting around a company rule or any service's terms. If you want the wider picture of working remotely across borders, read cross-border remote work with a VPN; this article stays focused on a short trip and on being able to reach your own work accounts.

A company VPN and a personal VPN are different tools

The word "VPN" covers two quite different things, and mixing them up causes most of the trouble people have when travelling.

A company VPN (or a similar remote-access tool) is provided and managed by your employer. It connects your device to the company's own network or to a gateway that the company controls. Its purpose is to let you reach internal systems such as file servers, intranet pages, internal tools or finance systems that are not open to the public internet. The company decides who may use it, what it can reach, how you sign in and what is logged. You use it because IT told you to, with credentials IT gave you.

A personal VPN is a service you choose and pay for yourself. It encrypts the traffic between your device and the VPN provider, which can help on shared networks such as hotel and airport Wi-Fi. It does not connect you to your employer's internal network. Your company does not manage it, and it knows nothing about your work systems.

	Company VPN	Personal VPN
Who provides it	Your employer's IT team	You
Main purpose	Reach internal company systems	General privacy on shared networks
Who sets the rules	The employer	You and the provider
Reaches internal servers	Yes, if configured	No
Works as a replacement for the other	No	No

The most important sentence in this article is the last row of that table. They do not substitute for each other. A personal VPN will not open your intranet, and a company VPN is not meant for your holiday photos or personal streaming. For a clear comparison, see business VPN vs personal VPN.

Ask IT before you travel, not from the airport

The single most useful thing you can do is a five-minute conversation with your IT or helpdesk team before you leave. Many travel problems become simple when you know the rules in advance. Questions worth asking:

1. Am I allowed to work from this country? Some employers restrict where staff may access company data from, for legal, contractual or security reasons. Do not assume that being on holiday makes the rule disappear.
2. Which method am I supposed to use? A company VPN client, a browser-based portal, a managed laptop, a virtual desktop? Install and test it before you go, while IT is available to help.
3. Is a personal VPN allowed on my work laptop or phone? In some organisations it is not, because a second VPN can conflict with the company one or hide activity that the security team needs to see. The answer may differ for a personal phone that is enrolled in a work profile.
4. Will my sign-in be blocked or challenged from abroad? If your company restricts logins by country, ask whether a temporary travel exception exists and how to request it. Requests like this usually need lead time.
5. How will I receive verification codes? Confirm that the method works in the country you are visiting.
6. Who do I call if I am locked out? Get a phone number or chat route that works from abroad, and note the working hours in Thailand time.
7. Which files may I carry, open or download while away? Some documents should simply stay where they are.

If you will travel often, ask whether your company has a written travel or remote-work guide. If it does, it will answer most of the points above.

Why some company systems block foreign logins

It can feel unfair when your own account stops working because you are in another country. From the system's point of view, though, a sign-in from an unexpected place is exactly the thing worth checking. Stolen passwords are usually used from somewhere far away from the real owner, so many organisations configure their systems to treat a new country as a warning sign.

Typical reactions include:

• Blocking sign-ins from outside certain countries. The administrator has set a location-based rule, and your sign-in is simply outside it.
• Asking for extra verification. A new country, new device or new network may trigger a code, an approval prompt or a security question.
• Temporarily locking the account. Several unusual attempts in a row may lock the account until IT or HR confirms who you are.
• Limiting what you can do. Reading email may work while downloading attachments or exporting payroll data is restricted.
• Requiring a managed device. The system may accept your sign-in only from a laptop that IT has enrolled.

The system can usually see the public IP address your connection comes from, along with the device and the browser. If you want to understand what that address does and does not reveal, what a public IP address is is a useful primer.

Please resist the urge to keep retrying with different tricks. Repeated failed attempts look like an attack, and they can lock your account for longer. Stop, note the time and the exact message on screen, and contact IT. A short, clear message such as "I am in Country X until 20 November, I signed in at 14:05 Thailand time and saw this error" lets the helpdesk check logs quickly and, if policy allows, fix the issue properly.

MFA and OTP while roaming

Most work accounts now require a second step in addition to the password, and travel is when this step most often fails. The guide to two-factor authentication explains the idea; here are the points that matter on a trip.

SMS codes. These depend on your Thai SIM receiving messages abroad. Roaming may be switched off to save money, the SIM may be swapped for a local one, or the phone may be in airplane mode with Wi-Fi only. Any of these can stop the code arriving. Before you leave, check that your Thai number is active, that roaming for messages is possible on your plan, and whether delivery is slower than at home.

Authenticator apps. Codes generated on your phone do not need a signal at all, which makes them more reliable when travelling. If your company uses an authenticator app and you have changed phones recently, make sure it is moved properly before the trip. The time-based method behind these codes is described in RFC 6238.

Push approvals. These need internet access on the phone that holds the app. If your only connection is hotel Wi-Fi and it fails, the prompt will not appear.

Hardware keys and passkeys. If your company issues a physical key, carry it separately from your laptop. Passkeys are described by the FIDO Alliance, and their availability depends entirely on what your employer supports.

Backup methods. Ask IT whether backup codes exist and where to keep them, for example in a password manager and not in a plain note on the same phone. Losing a phone abroad while it is the only way to sign in is the scenario to prepare for.

Never read a verification code out to anyone who calls or messages you, including someone who says they are from IT. Real helpdesks do not need your code. The CISA page on MFA gives a clear introduction to why the second step matters.

Using hotel and public Wi-Fi safely

Hotel, airport and cafe networks are shared with strangers. They are convenient, and for light use they are usually fine, but they are not somewhere to be careless with work accounts. The FTC's page on public Wi-Fi has a sensible overview, and our own guides on staying safer on public Wi-Fi and using a VPN on hotel Wi-Fi go into more detail.

A practical routine for work on a trip:

1. Check the network name. Ask reception for the exact name. Fake networks with similar names exist.
2. Pass the sign-in page first. Many hotel networks show a page that must be accepted before anything else works, and a VPN usually cannot connect until it is done.
3. Use your employer's approved access method. If IT gave you a company VPN, connect to it as instructed.
4. Look for HTTPS. Make sure the padlock is shown and the address is the real company address, not a lookalike that you reached from a link in a message.
5. Keep devices updated. Install operating system and browser updates before you travel, not on the hotel network.
6. Prefer your own mobile data for sensitive tasks. Approving a payroll change or opening a confidential file over your own mobile connection avoids the shared network completely.
7. Turn off automatic joining of open networks, and forget the hotel network when you check out.
8. Lock the screen whenever you step away, even in a cafe for a minute.

If the hotel network limits the number of devices per room, work out in advance which devices really need it, rather than discovering the limit during an urgent call.

When a personal VPN is appropriate, and when it is not

A personal VPN has a real, modest job on a trip: it encrypts the link between your device and the VPN provider, so that other people on the same hotel or airport network cannot read your ordinary browsing. That is useful for personal email, social media, news, booking sites and general privacy.

It is generally appropriate when:

• You are using your own personal device for personal activity.
• Your employer has no rule against it for the device you are using.
• You are not trying to reach work systems through it.

It is generally not appropriate when:

• Your employer forbids it, or has not yet answered your question. If you are unsure, do not install it on a work device.
• You are on a company-managed laptop or phone with security software that expects to see your real connection.
• You expect it to replace the company VPN. It cannot reach internal systems, and running it alongside the company VPN may cause errors.
• You hope it will hide your location from your employer's systems or avoid a location rule. Doing that may breach policy, and this article does not suggest it.

A sensible compromise many people use is to keep work and personal separate: the company laptop uses only the company's tools, while a personal phone or tablet uses a personal VPN for personal activity on public Wi-Fi. If you are curious how this kind of split works in practice, what split tunneling is is relevant, although on a company-managed device the settings are usually decided by IT, not by you.

Taking care of work files on shared and borrowed devices

The risk to work data on a trip is often not the network at all but the device. Business-centre computers, a friend's laptop, a rented tablet or a hotel TV with a browser are all places where data can be left behind.

Good habits:

• Avoid opening confidential files on devices you do not control. If it is truly unavoidable, use only what your employer permits.
• Do not save files locally. Downloads folders, caches and auto-saved copies remain after you leave.
• Use private or guest browser sessions where you must use someone else's computer, and sign out completely when finished. A private window helps with local history only, as explained in VPN vs incognito mode, and it is not protection from a compromised computer.
• Never save passwords when the browser offers.
• Do not use USB sticks or cables from shared machines to move work files.
• Beware of shoulder-surfing. Planes, trains and cafes are full of people who can read a screen. A privacy filter or simply a changed seat can help.
• Report lost devices immediately. Call IT as soon as a work phone or laptop goes missing; they can often lock or wipe it remotely.
• Keep personal and work accounts separate, so that a leak on one does not expose the other.

Also remember data-protection obligations. Customer details, employee records or financial figures may be covered by company rules or by law, and travelling with them or opening them on the wrong device can create a problem for your employer. If you are unsure whether you may carry or open something, ask before you travel, not after.

Limits and what to watch for

Keep expectations realistic.

• A personal VPN is not a company VPN. It will not give you access to internal systems and does not make you compliant with company policy.
• A VPN does not stop phishing. Messages claiming to be from IT, HR or a senior manager and asking for urgent action are common on trips, when people are tired and rushed. Check the sender and the link, and use the CISA guidance on phishing and our guide to recognising phishing websites.
• It does not protect a compromised device. If malware is already on the laptop, encryption on the network will not fix it.
• It does not guarantee that any site or app will work. Some services treat VPN traffic differently, and results vary.
• It does not change the law or your contract. Data-location rules, confidentiality duties and employer policies still apply wherever you are.
• It does not make you anonymous. Your employer's systems, and any site you sign in to, still know it is you.
• Time zones and bandwidth matter too. A video call across seven hours of difference and a slow hotel line is a bigger practical problem than most security settings.

A practical checklist before you go

Use this list in the week before travel.

1. Ask IT whether you may work or access company systems from your destination, and whether a travel exception is needed.
2. Install and test the approved company VPN or access tool, and sign in once at home.
3. Confirm how MFA codes reach you, and check that your Thai number works abroad if you rely on SMS.
4. Set up a backup method and store backup codes somewhere safe, not only on the same phone.
5. Save the IT helpdesk contact details in a way that works offline, with working hours in Thailand time.
6. Update the operating system, browser and apps on every device you carry.
7. Set screen locks, and enable find-my-device and remote wipe if your company allows it.
8. Decide in advance which files you need, and leave out anything you do not.
9. Separate personal and work activity. Use a personal VPN only for personal use, and only if policy allows it.
10. Plan to use your own mobile data for sensitive work tasks when the hotel network feels doubtful.
11. On return, sign out of shared devices, forget hotel networks, and change any password you entered somewhere uncertain.

Summary

Reaching Thai work systems from abroad comes down to using the right tool and asking the right person. A company VPN is your employer's tool for internal systems, a personal VPN is your own tool for general privacy, and neither replaces the other. Talk to IT before you travel, expect that some systems will challenge or block foreign sign-ins, prepare your OTP method for roaming, keep work files off devices you do not control, and treat hotel Wi-Fi as a shared network. If a personal VPN fits your own devices and your employer's policy, you can see how a prepaid pass works on the XPASS pricing page.