macOS Codex app loses authentication after first prompt when Advanced Security and a passkey are enabled

What version of the Codex App are you using (From “About Codex” dialog)?

26.818.21641 Bundled app-server: 0.148.0-alpha.21

What subscription do you have?

Pro — personal account

What platform is your computer?

Darwin 25.6.0 arm64 arm

What issue are you seeing?

The Codex macOS desktop app loses my ChatGPT authentication immediately after I send the first prompt in a conversation.

This happens when Advanced Security is enabled on my personal ChatGPT account, which has a passkey configured. I can sign in and open the app normally, but after sending a simple prompt such as test, the request fails and the app returns to the signed-out state.

The desktop log shows the account initially being authenticated successfully, followed by an authentication failure approximately five seconds later:

account lookup succeeded: authenticatedAccountPresent=true, authMethod=chatgpt
desktop_fetch_auth_401: hadToken=true
auth status: hasToken=false, nullReason=auth_token_missing, tokenExpiryState=missing
account lookup failed: authenticatedAccountPresent=false, failureType=account_info_token_unavailable
Missing valid access token

The same account works normally on chatgpt.com and in the Codex CLI. Disabling Advanced Security immediately stops the desktop app from logging out. Re-enabling it causes the issue to return.
This prevents me from keeping Advanced Security enabled while using the desktop app and protected features/models that require it.

What steps can reproduce the bug?

1. Use a personal ChatGPT Pro account.
2. Add a passkey to the account.
3. Enable Advanced Security.
4. Sign in to the Codex macOS desktop app using the ChatGPT account.
5. Start a new conversation.
6. Send a simple prompt such as test.
7. Observe that authentication is lost and the app returns to the signed-out state.

The problem reproduced consistently every time while Advanced Security was enabled.

What is the expected behavior?

The prompt should be sent successfully, and the desktop app should preserve the authenticated session when Advanced Security and a passkey are enabled.

The authentication behavior should be consistent with chatgpt.com and the Codex CLI, where the same account works normally.

Additional information

Approximate reproduction time from the attached log:
2026-08-20 12:46:55 UTC

Troubleshooting already attempted:

1. Reinstalled the desktop application.
2. Cleared or renamed the application’s local cache and state directories.
3. Reset local authentication and Keychain-related application data.
4. Signed in again.
5. Confirmed that chatgpt.com works under the same account.
6. Confirmed that the Codex CLI works under the same account.
7. Confirmed that disabling Advanced Security fixes the desktop application.
8. Confirmed that enabling Advanced Security causes the problem to return.

The account settings interface currently does not allow me to remove the configured passkey, so I could not test Advanced Security without the passkey.

The attached desktop log contains the complete authentication sequence. Sensitive account identifiers and local filesystem usernames should be redacted before publishing it.