Windows Desktop app repeatedly logs out after sending one message when Advanced Account Security is enabled (401 Missing valid access token or actor biscuit)

What version of the Codex App are you using (From “About Codex” dialog)?

26.818.2441.0

What subscription do you have?

ChatGPT Plus / Team / Pro

What platform is your computer?

Windows 11 x64 (Package: OpenAI.Codex_26.818.2441.0_x64__2p2nqsd0c76g0)

What issue are you seeing?

Summary

After enabling Advanced Account Security on my ChatGPT account, the Windows ChatGPT / Codex Desktop app logs out and returns to the sign-in screen immediately after sending a single message. Logging back in allows sending one message, after which it immediately gets kicked back to the login screen again (login loop).

Symptoms & Behavior

1. Launch Windows ChatGPT Desktop app and sign in with ChatGPT successfully.
2. Send a message to start or continue a conversation.
3. The response is generated, but immediately upon turn completion / background sync, the desktop app loses authentication and drops back to the "Log in to ChatGPT" screen.
4. Signing in again succeeds temporarily, but sending the next message triggers the exact same logout behavior.

Relevant Log Excerpt

From %LOCALAPPDATA%\Packages\OpenAI.Codex_2p2nqsd0c76g0\LocalCache\Local\Codex\Logs\:

warning [electron-fetch-wrapper] desktop_fetch_auth_401 hadToken=true skipRetryReason=null target="GET https://chatgpt.com/backend-api/accounts/:param/settings" tokenSource=cached willRetry=true
warning [WindowContext] Thread catalog sync failed errorMessage="App server account changed"
warning [AppServerConnection] app_server_connection.auth_status_result authMethod=chatgpt cacheWrite=null hasToken=false nullReason=auth_token_missing refreshToken=true tokenExpiryState=missing
warning [electron-message-handler] sa_server_request_failed attachAuth=true attachIntegrityState=true status=401 errorMessage="{\"detail\":\"Missing valid access token or actor biscuit\"}" url=/accounts/<account_id>/settings
warning [electron-fetch-wrapper] desktop_fetch_auth_401 hadToken=false skipRetryReason=no_token_attached target="GET https://chatgpt.com/backend-api/wham/:param/:param" tokenSource=cached willRetry=false
warning [electron-message-handler] sa_server_request_failed attachAuth=true attachIntegrityState=true status=401 errorMessage={"detail":"Unauthorized"} url=/wham/onboarding/context

What steps can reproduce the bug?

1. Enable Advanced Account Security on ChatGPT account settings.
2. Open Windows ChatGPT/Codex Desktop app (OpenAI.Codex_26.818.2441.0).
3. Complete sign-in.
4. Send a prompt to ChatGPT.
5. As soon as the generation completes and background sync is performed, the app is redirected back to the login screen.

What is the expected behavior?

The desktop app should maintain authentication and valid actor cookies/session tokens after turn completion, even when Advanced Account Security is enabled.

Additional information

• Web version (chatgpt.com) works without issues under the same account.
• Issue specifically started immediately after enabling Advanced Account Security.
• The root cause in logs indicates a 401 on /accounts/<id>/settings with "Missing valid access token or actor biscuit", which drops hasToken to false and triggers account/login/start.

Reproduce the loop on Windows 11 with Advanced Account Security enabled, then inspect the Codex logs under %LOCALAPPDATA%\Packages\OpenAI.Codex_2p2nqsd0c76g0\LocalCache\Local\Codex\Logs. Start with the /accounts/<account_id>/settings request and the auth_status_result transition, and verify that sending a message no longer returns the app to the login screen.