Codex device authorization still sends SMS to old phone number after ChatGPT phone number was updated

Open 💬 3 comments Opened Jun 2, 2026 by legtar

What issue are you seeing?

I am unable to authorize Codex because the Codex device authorization flow appears to use an outdated phone number for SMS verification.

I can successfully sign in to:

ChatGPT web
platform.openai.com

I also updated the phone number in my ChatGPT account/profile settings. However, when I try to authorize Codex via the device authorization flow, it still asks me to confirm the login using an SMS code sent to my old phone number, which I no longer have access to.

The issue happens on:

https://auth.openai.com/codex/device

The prompt is similar to:

Enter the code sent to your phone number ending in ****

PII redacted:

Old phone number shown in Codex auth: +* 9498
Current phone number in ChatGPT account/profile: +
*9031
Account email: aleksey.kuznetsof@gmail.com

This looks like Codex device authorization is using stale phone verification data and is not synchronized with the current phone number associated with my ChatGPT/OpenAI account.

Impact: I am blocked from using Codex even though I have paid for access and can access ChatGPT and platform.openai.com normally.

What steps can reproduce the bug?

  1. Have an OpenAI/ChatGPT account with Codex access.
  2. Update the phone number in the ChatGPT account/profile settings.
  3. Confirm that ChatGPT web login works.
  4. Confirm that platform.openai.com login works.
  5. Enable device code authorization for Codex in ChatGPT settings.
  6. Run Codex CLI device login:
codex logout
codex login --device-auth
  1. Open the device authorization URL on a device/browser where the same ChatGPT account is already logged in.
  2. Go to:
https://auth.openai.com/codex/device
  1. Try to complete Codex authorization.

Actual result:

The Codex device authorization flow asks for an SMS code sent to the old phone number.

Expected result:

The Codex device authorization flow should use the current phone number from the ChatGPT/OpenAI account, or allow authorization through the already authenticated ChatGPT session/current MFA method.

No code snippet can fully reproduce this because it depends on account authentication state and phone-number sync between ChatGPT account settings and Codex authorization.

What is the expected behavior?

Codex device authorization should use the current phone number associated with the OpenAI/ChatGPT account.

After the phone number is updated in ChatGPT account/profile settings, all OpenAI authentication flows, including Codex device authorization, should use the updated phone number.

Alternatively, if the user is already authenticated in ChatGPT and has completed MFA, Codex device authorization should allow the user to approve the device code without requiring SMS verification to an outdated phone number.

The authorization flow should not require an SMS code sent to an old phone number that is no longer associated with the account in ChatGPT settings.

Additional information

This is not a general login issue:

  • ChatGPT web login works.
  • platform.openai.com login works.
  • The same OpenAI account is used.
  • The updated phone number is visible in ChatGPT account/profile settings.
  • The problem appears only during Codex device authorization.

This looks like a stale account data / phone verification sync issue in the Codex authorization flow.

Please investigate whether Codex device authorization is reading phone verification data from a different or outdated source compared with ChatGPT account/profile settings.

I can provide screenshots, timestamps, browser/device details, and account email privately to OpenAI support if needed. I am avoiding posting full PII in this public GitHub issue.

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗