YubiKey / hardware security key login loop in Codex Desktop for Windows

What version of the Codex App are you using (From “About Codex” dialog)?

26.820.60940

What subscription do you have?

Plus

What platform is your computer?

Microsoft Windows NT 10.0.26100.0 x64

What issue are you seeing?

After enabling Advanced Account Security, I can successfully authenticate with my YubiKey when Codex starts. But as soon as I open a project or chat, Codex asks me to authenticate again. After successful YubiKey login it returns to the project, and opening the chat immediately triggers the login flow again - endless loop.

The hardware-key authentication itself succeeds; the Windows Codex Desktop session just doesn’t stay authenticated.

This currently makes Codex Desktop practically unusable for users who are required to use physical security keys.

What steps can reproduce the bug?

1. Use Codex Desktop on Windows with an OpenAI account that has Advanced Account Security enabled and requires authentication with a physical FIDO2 hardware security key (YubiKey).

1. Launch Codex Desktop.

1. Complete the login flow using the YubiKey. Authentication succeeds and Codex opens normally.

1. Select an existing project.

1. Open any existing chat/thread inside that project.

1. Codex immediately starts the login flow again.

1. Authenticate again successfully with the same YubiKey.

1. Codex returns to the project view.

1. Open the chat/thread again.

1. The login flow starts again.

This repeats indefinitely.

What is the expected behavior?

Expected behavior:
After successfully authenticating with the YubiKey, Codex Desktop should preserve the authenticated session and allow projects and chats to open normally.

Actual behavior:
YubiKey authentication succeeds, but opening a project/chat causes Codex Desktop to request authentication again, resulting in an endless authentication loop.

Additional information

_No response_