Authentication Error when trying to login using the desktop app!

Is there any issue with the chatgpt desktop app ? I am not able to login

Login failed. Please start the sign-in process again.

You can contact us through our help center at help.openai.com if you keep seeing this error. Include the request ID below in your message.

error_code: token_exchange_failedrequest_id: 5279cdb3-8dfa-4f2e-a9e7-1720a4968ab1

I am able to log in to both on Windows 11

ChatGPT Classic

and ChatGPT Codex

image

I just finished setting up Advanced Account Security with two yubikeys, a nano and a NFC. The authentication succeeds, and I get an email confirming that my account is signed in from a new device.

The problems start when I’m handed a session right after authentication.
The error reads: “Expired session: please start over”, with the following request id.
Request ID: 5f0bebd6-0f88-4ea0-9d15-48f14f049576

This happens on every device I have, both in broswers and in the phone app.

Update:
I still have not been handed a working session when authenticating myself at chatgpt.com .
I tried the same authentication methods when signing in to the OpenAI Help Center, and there were no issues whatsoever.
I hope this can narrow down the problem even further.

Update:
A screenshot of the errorpage.

I have the same problem after setting up Advanced Account Security with yubikeys. The authentication succeeds, confirmed by the email notice I get about a sign-in from a new device. But the session handed to me is not working.
I get the same error message as you: Session expired, try again. But with a request id reference instead of an error code.
Request ID: 5f0bebd6-0f88-4ea0-9d15-48f14f049576

I have an open tppic about this issue.

Thanks for noting that, could be valid discrimator.

Note: I am not an OpenAI employee but a long time user of the forum.


Personally I find that to be confusing as it expects you find the bot in the lower right, which many do not find.

Posting here is actually quite helpful, especially when others see and report the same problem.

A more reliable way to obtain a support ticket number/Case ID, rather than using the chatbot available through the OpenAI Help Center, is to email support@openai.com.

When contacting Support, follow the guidance in:

Best Practices for Submitting a Support Request

Remember to post the support ticket number here. OpenAI Support cannot directly connect a Discourse account with a ChatGPT account, so the ticket number allows the forum team to identify the relevant support case.


Thanks for providing that, a Request ID may be of more value than a Case ID

Do the people at OpenAI search for unresolved customer issues on this forum?
Is there a user account connected to any OpenAI employee who can pass on the information regarding my issue with session retrieval?

The OpenAI HelpCenter is not able to categerize my problem, and comically gives me a link to delete my account.

They do actively monitor some of the tags and categories.

I have already notified the next level up to either

  • keep an eye on this topic
  • escalate it up futher

I do not note those as that is not the proper way to handle issues, doing so creates more work for those trying to resolve such issues. Right now, if this were my problem I would just patiently sit back and wait.

I really do wonder why that bot is still active. :person_gesturing_no:

Years ago the bot was one way to get basic answers as the models did not know anything beyond what they were trained on and the bot seemed to use RAG to access more information.

The GPT models are now able to answer such questions by searching the FAQ and other pages and can even make recommendations on how to improve what you are doing with a model and model selections and settings.

Welcome to the Community, @abdallahrida98, and it’s been a while, @durim.miziraj! We appreciate both of you for providing a request ID, and thanks, @EricGT, for chiming in.

After checking further, these look like two different issues.

@abdallahrida98, your request appears to be failing during the Google sign-in OAuth token exchange. There’s no reported outage at the moment, so please retry the login from a fresh browser tab or clear recent browsing data. If it still fails, share a new request ID so the failed attempt can be investigated.

@durim.miziraj, your logs point to a duplicate/replayed passkey MFA verification. Please start a fresh authentication/passkey challenge instead of retrying the existing /auth_challenge/verify request. Refresh or restart the login flow and authenticate again with the passkey. If it keeps happening, send over a new request ID and we can dig further.

-Mark G.

You can try completely closing the desktop app and starting the login process again. If it still shows token_exchange_failed, try signing in through the browser first, then reopen the app. Clearing the app/browser session or reinstalling the desktop app may also help.

Hey folks, it looks like this issue has already been resolved. Can you confirm whether you’re still experiencing it on your end?

-Mark G.

how to fix this thing?, I already did all the trouble shooting recommended

@OpenAI_Support keep coming back

Hi @analyn123, please contact support@openai.com and include a short screen recording of the login flow, along with your OS version, app version, and a new request_id. That should give the support team what they need to troubleshoot further.

Once done, feel free to drop the case ID here so we can help monitor the issue.

-Mark G.

My ChatGPT account started showing inconsistent errors suggesting possible suspicious activity, even though I was the only person signed in at the time. As a precaution, I decided to strengthen my account’s security by enabling Advanced Account Security (passkey/security key sign-in).

However, after completing that setup, I was no longer able to sign in successfully using my passkey — even though the system correctly recognized both the passkey and my account. This forced me to begin the account recovery process, which requires a mandatory 48-hour waiting period after a valid recovery key is submitted.

In an attempt to work around the issue, I tried signing in through multiple channels: my main desktop computer, a secondary laptop, a smartphone, and a tablet, across different networks (home Wi-Fi and mobile data from different carriers) and different browsers (Chrome, Firefox, and Mozilla). Every single attempt resulted in the same session error, which rules out an isolated device, network, or browser issue.

Throughout these attempts, the system consistently returned the following errors:

  • “Session expired. Please start over.” — occurring immediately after a successful passkey authentication.
  • A more specific internal error: “Route Error (405 Method Not Allowed): Route ‘AUTH_CHALLENGE_SELECTION’ does not have an action, but you are trying to submit to it.”

This issue closely resembles one reported by another user in this same forum (“Authentication succeeds, but retrieval of session fails with ‘session expired’”), who had also enrolled in Advanced Account Security and encountered the exact same session-expired error immediately after successful authentication, across multiple devices. This strongly suggests the issue lies in the authentication flow itself, rather than on my end.

As a result, I’m currently locked out of my account for the full 48-hour period, which is causing real professional harm, since I rely on ChatGPT daily for my work. I would greatly appreciate a prompt review and resolution, given the impact this is having.