Windows Codex Local fails before every command: CryptUnprotectData failed 2148073483
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 125k
- Forks
- 19.4k
- PR merge metrics
- PR metrics pending
Description
What version of the Codex App are you using (From “About Codex” dialog)?
26.903.61454
What subscription do you have?
ChatGPT Plus
What platform is your computer?
Windows 11 Pro, 64-bit (x64)
What issue are you seeing?
Codex Local fails before every command starts on a new Windows 11 Pro computer.
Error:
CryptUnprotectData failed: 2148073483
Hex code: 0x8009000B (NTE_BAD_KEY_STATE)
Steps to reproduce:
- Open the ChatGPT desktop app.
- Open an existing local Codex project.
- Select Local execution.
- Ask Codex to perform a simple read-only command, such as listing the project’s top-level files.
- The task fails before PowerShell or any command starts.
Expected result:
Codex should start the local shell and perform the requested read-only command.
Actual result:
Codex immediately returns “CryptUnprotectData failed: 2148073483.” No command runs and no project files are modified.
The project folder is accessible normally through Windows File Explorer, and README.md opens correctly. Windows Terminal and PowerShell also work normally outside Codex.
Troubleshooting already completed:
- Fully restarted ChatGPT/Codex and Windows.
- Confirmed the ChatGPT desktop app is up to date.
- Signed out of ChatGPT and signed back in.
- Used Windows Settings to Repair the ChatGPT app.
- Used Windows Settings to Reset the ChatGPT app and then reopened it.
- Retested after every step.
- The same error persists.
- Diagnostic logs were previously submitted through the app’s feedback function.
This appears to be a Windows credential-encryption/DPAPI failure inside Codex Local because it occurs before the shell starts. Please advise on a safe fix and whether any additional diagnostic information is required.
What steps can reproduce the bug?
- Open the ChatGPT desktop app on Windows 11 Pro.
- Open an existing Codex project configured for Local execution.
- Ask Codex to run any simple read-only local command, such as listing the project’s top-level files.
- The task fails immediately before PowerShell or any command starts with: CryptUnprotectData failed: 2148073483.
What is the expected behavior?
Codex Local should start PowerShell and execute the requested read-only command against the selected local project folder.
Additional information
The project folder is accessible normally through Windows File Explorer, and Windows Terminal and PowerShell work outside Codex. Restarting Windows and ChatGPT, signing out and back in, Windows Repair, and a full Windows app Reset did not fix the error. The app is fully updated. Nothing in the project was modified. Diagnostic logs were previously submitted through the app’s feedback function.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing Codex Local execution from a read-only command request to the CryptUnprotectData call on Windows, using the reported 0x8009000B error as the first diagnostic checkpoint. Reproduce with a local project and confirm that PowerShell starts and the command completes without modifying project files.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- desktop-dev, operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100