openai / openai/codex

Windows Codex Local fails before every command: CryptUnprotectData failed 2148073483

Open
#44,495 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

app bug tool-calls windows-os
Dominant language
Rust
Stars
125k
Forks
19.4k
PR merge metrics
PR metrics pending

Description

What version of the Codex App are you using (From “About Codex” dialog)?

26.903.61454

What subscription do you have?

ChatGPT Plus

What platform is your computer?

Windows 11 Pro, 64-bit (x64)

What issue are you seeing?

Codex Local fails before every command starts on a new Windows 11 Pro computer.

Error:
CryptUnprotectData failed: 2148073483
Hex code: 0x8009000B (NTE_BAD_KEY_STATE)

Steps to reproduce:

  1. Open the ChatGPT desktop app.
  2. Open an existing local Codex project.
  3. Select Local execution.
  4. Ask Codex to perform a simple read-only command, such as listing the project’s top-level files.
  5. The task fails before PowerShell or any command starts.

Expected result:
Codex should start the local shell and perform the requested read-only command.

Actual result:
Codex immediately returns “CryptUnprotectData failed: 2148073483.” No command runs and no project files are modified.

The project folder is accessible normally through Windows File Explorer, and README.md opens correctly. Windows Terminal and PowerShell also work normally outside Codex.

Troubleshooting already completed:

  • Fully restarted ChatGPT/Codex and Windows.
  • Confirmed the ChatGPT desktop app is up to date.
  • Signed out of ChatGPT and signed back in.
  • Used Windows Settings to Repair the ChatGPT app.
  • Used Windows Settings to Reset the ChatGPT app and then reopened it.
  • Retested after every step.
  • The same error persists.
  • Diagnostic logs were previously submitted through the app’s feedback function.

This appears to be a Windows credential-encryption/DPAPI failure inside Codex Local because it occurs before the shell starts. Please advise on a safe fix and whether any additional diagnostic information is required.

What steps can reproduce the bug?
  1. Open the ChatGPT desktop app on Windows 11 Pro.
  2. Open an existing Codex project configured for Local execution.
  3. Ask Codex to run any simple read-only local command, such as listing the project’s top-level files.
  4. The task fails immediately before PowerShell or any command starts with: CryptUnprotectData failed: 2148073483.
What is the expected behavior?

Codex Local should start PowerShell and execute the requested read-only command against the selected local project folder.

Additional information

The project folder is accessible normally through Windows File Explorer, and Windows Terminal and PowerShell work outside Codex. Restarting Windows and ChatGPT, signing out and back in, Windows Repair, and a full Windows app Reset did not fix the error. The app is fully updated. Nothing in the project was modified. Diagnostic logs were previously submitted through the app’s feedback function.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing Codex Local execution from a read-only command request to the CryptUnprotectData call on Windows, using the reported 0x8009000B error as the first diagnostic checkpoint. Reproduce with a local project and confirm that PowerShell starts and the command completes without modifying project files.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
desktop-dev, operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.