›_ Codex Issues
Codex Issues / #31110

Remote Control fails with error " couldn't check security requirements " due to Cloudflare-HTML-challenge

Open 💬 2 comments Opened Jul 4, 2026 by valentinveyron

What version of the Codex App are you using (From “About Codex” dialog)?

Version 26.623.101652 - Released Jul 3, 2026

What subscription do you have?

Currently ChatGPT Plus, open for sponsored Pro Subscription by the way 😌

What platform is your computer?

Microsoft Windows NT 10.0.19044.0 x64

What issue are you seeing?

Codex Desktop cannot start remote control. The UI shows:
"couldn't check security requirements"
<img width="460" height="226" alt="Image" src="https://github.com/user-attachments/assets/9d8176dd-5b58-4143-8d25-8124f5aa53a0" />

What steps can reproduce the bug?

<img width="868" height="867" alt="Image" src="https://github.com/user-attachments/assets/0bac93a7-4477-46f8-bce8-97a51f43be29" />

What is the expected behavior?

_No response_

Additional information

Codex starts the remote-control security check successfully:

remoteControl/status/read -> success
configRequirements/read -> success

It then checks whether remote control requires MFA, and that request succeeds:

GET /backend-api/wham/remote/control/mfa_requirement
status=200

GET /backend-api/accounts/mfa_info
status=403

The response is a Cloudflare HTML-challenge.
("Enable JavaScript and cookies to continue")

View original on GitHub ↗

2 Comments

lubluniky · 1 month ago

I am seeing what looks like the same failure mode on macOS after switching/signing back into a ChatGPT account.

Environment:

  • Codex App: 26.623.101652 (CFBundleVersion 4674)
  • Codex CLI / remote-control daemon: 0.142.5
  • Platform: macOS 26.5, Apple Silicon (arm64)
  • Remote-control daemon status: running via standalone install at ~/.codex/packages/standalone/current/codex
  • Browser login attempts tried through both Zen and Safari
  • Account has an iCloud Keychain passkey configured

Observed behavior:

  • Settings > Connections > Control this Mac > Allow connections shows the generic toast:
  • Couldn't update remote control availability
  • codex remote-control start --json reports:
  • Remote control is enabled on <host> but the connection is errored.
  • Local stale state was cleared:
  • remote_control_enrollments rows are 0
  • daemon was stopped and restarted after fresh sign-in

Current endpoint behavior with the fresh Codex auth session:

GET /backend-api/wham/remote/control/mfa_requirement
HTTP/2 200
x-oai-request-id: 1e9c2046-5c98-4a5f-85f3-f79d17959234
cf-ray: a169aa4aa9a3c3b8-ARN
body: {"requirement":"required"}
GET /backend-api/accounts/mfa_info
HTTP/2 403
content-type: text/html; charset=UTF-8
cf-mitigated: challenge
cf-ray: a169aa4ddf9ca455-ARN
body: Cloudflare HTML challenge page ("Enable JavaScript and cookies to continue")

The remote-control daemon then repeatedly fails enrollment:

remote control server enrollment failed at
https://chatgpt.com/backend-api/wham/remote/control/server/enroll

HTTP 403 Forbidden
request-id: 315effda-263c-472c-80c3-195b3a7ef9d7
cf-ray: a169aa3a091b5fc4-ARN
body: {"detail":"Multi-factor authentication required"}
error_kind: PermissionDenied
has_enrollment: false

This seems to be an auth-assurance/MFA-check problem rather than a local daemon problem: the daemon is running, the fresh ChatGPT auth session is accepted by codex login status, but the MFA-info endpoint is blocked by a Cloudflare challenge and enrollment continues to fail with Multi-factor authentication required.

Expected:

  • Codex should either complete the MFA/passkey verification flow for the desktop session, or surface the actionable MFA/Cloudflare failure instead of the generic remote-control availability toast.
zaible-solverAI · 1 month ago

I’m seeing the same failure on Windows in the current ChatGPT/Codex desktop app.

Environment:

  • ChatGPT Business account
  • Advanced Account Security enabled
  • iPhone ChatGPT app intended for Codex Remote pairing

Reproduction:

  1. Open Codex Remote setup on the Windows desktop app.
  2. Select Get started under “Connect a device to this PC.”
  3. Before any QR code is generated, the desktop app shows: “Couldn’t check security requirements. Try again.”

Result: setup cannot proceed because the QR code never appears.

This appears consistent with the reported security/MFA status-check failure. Please also confirm whether Advanced Account Security is expected to be compatible with Codex Remote for Business accounts.