To use Codex on an existing repository, open the ChatGPT desktop app, choose Codex from the top-left menu, and open the local project folder. Grant access only to the files the task needs, start with a narrowly scoped request, and review proposed changes and commands before accepting or running them. Local execution does not guarantee that your messages and task context stay only on your device.
Open your existing repository in Codex
- Open the ChatGPT desktop app and choose Codex. Sign in, then select Codex from the top-left menu. Codex is a separate desktop view for working with local folders, repositories, terminals, and developer tools; it is not a selectable view on the web or mobile. See OpenAI’s ChatGPT Work and Codex guide.
- Choose the local project folder. Open the folder containing the repository you want to work on, rather than granting access to unrelated directories. OpenAI’s guidance is: “Open a local folder or project and grant access only to the files the task needs.”
- Describe a small, bounded first task. Ask for a repository explanation, investigation of one issue, or a limited change. Name the behavior or files in scope, state constraints, and specify what a useful result should include. Ask Codex to explain proposed changes before you accept them; the Codex plan and desktop guidance recommends describing the outcome and constraints, then reviewing the result.
Review changes and commands before acting
Inspect the diff and any commands Codex proposes. Decide whether the edits fit the request and whether each command is appropriate before accepting or running it. Do not assume a setting described for the Codex CLI is also the current desktop app’s default: OpenAI’s older CLI getting-started guide describes approval modes for the CLI, while the installed desktop app’s controls are authoritative for its build.
As an Amazon Associate I earn from qualifying purchases.
Understand local execution, cloud tasks, and data handling
“Local” describes where a coding task executes; it does not mean that all related information stays on your computer. OpenAI says messages and task context may be stored in the cloud even when work runs locally. Avoid including credentials or unrelated sensitive material in prompts, and limit file access to what the task requires. For details, consult OpenAI’s desktop and data-handling information.
Free tools Windows power users keep installed
One-click scans. No signup required.
OpenAI distinguishes local workflows from cloud tasks, which run in OpenAI-managed environments. In managed workspaces, Codex Local and Codex Cloud can be controlled separately. Check which workflow is active and whether your workspace role permits it before starting a cloud task; availability and controls depend on workspace settings and policy. See the Codex plan and workspace guidance.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Check policy settings and version-sensitive configuration
Configuration names and supported values can change with the installed version. OpenAI’s current help article names Codex CLI 0.149.0+ and desktop app 26.818.31338+ and says approval_policy = "untrusted" is no longer supported in those versions. It lists sandbox_mode = "read-only" with approval_policy = "on-request" as a restrictive alternative. Project-level trust_level = "untrusted" is a separate setting and remains supported. Check the current official Codex configuration guidance and your installed version before relying on these values.
Choose a cautious first workflow
For an initial task in an unfamiliar repository, keep the scope small and the access narrow. A useful sequence is to ask Codex to explain the relevant code or investigate a single issue, review its explanation and proposed diff, then decide whether to accept edits or run commands. Broaden the task or permissions only when the work requires it and you understand the applicable sandbox, approval, and workspace controls.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
These steps concern ordinary Codex use in the desktop app. OpenAI’s separate Codex Security guidance recommends starting that product with a small set of repositories and dedicated reviewers, and reviewing findings and proposed patches; that is product-specific guidance, not a mandatory setup requirement for every desktop user. See OpenAI’s Codex guidance.
Quick Recap
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
