Codex Switch (codex-switch) is an open-source desktop account switcher and usage quota monitor for OpenAI Codex. See your accounts together, choose the next one, and recover an interrupted handoff. Optional quota-based switching starts Off.
Windows · macOS15+ · Linux preview · MIT open source · 1.44.0
Download · Get started · What's new
Actual Windows app with fictional account inputs. Native screenshots and source verification. Credentials stay in a local encrypted vault; switching restarts Codex. Independent project, not affiliated with OpenAI.
Find it useful? Star this repository or share it with another Codex user.
Release1.44.0 keeps the quota tanks and direct account switching while gathering models, automatic switching, restart, language and appearance in one Settings gear. Image-heavy chats also gain corrected built-in image routes and bounded concurrent request handling. What's changed and compatibility.
Release1.42.2 adds account-specific browser sign-in from warnings, default-Off quota-based account switching, optimal/custom priority, durable reopening/recovery, labeled subscription dates and official Pro 100/200/500 tiers. Behavior and verification scope / release gates.
Release1.42.3 recovers Windows usage refresh after Codex replaces its executable, without restarting Switch. Valid paths stay cached; installation gaps keep an explicit warning and requests are never replayed. Recovery and verification.
Release1.42.4 keeps the complete Linux account-auto-switch caption visible in the minimum window, without taking space from quota cards or adding dependencies. Native verification and delivery.
Release1.42.5 prioritizes eligible subscriptions expiring soon and adds an Auto Switch toggle with the next account. It retries a transient handoff up to two additional times while keeping controls busy. The persisted budget and original Continue identities prevent unbounded recovery and duplicate sends. Behavior and verification.
Release1.42.6 keeps Auto Switch usable when quota identifiers are duplicated or missing: ambiguous candidates are skipped and ambiguous source observations cannot trigger switching. Original data and valid expiry/custom ordering remain intact. Behavior and verification.
Release1.42.7 lets Linux terminal accounts work with the reviewed standalone Codex CLI0.164.0. Exact executable integrity and credential/workspace checks still apply. Compatibility and verification.
Release1.43.0 adds separate credit-balance decrease graphs in History and optional safe pause/recovery at zero ordinary quota. Credit use stays allowed by default. Usable past-date subscriptions retain priority, and diagnostic reports identify the actual running version. Verification.
Release1.43.1 keeps Auto Switch available when a fresh report still shows 0% after its reset time. The next eligible account remains visible, and an available handoff takes priority over a local credit-protection pause. Verification.
Release1.43.2 preserves browser-login cancellation when a temporary Windows database file stays briefly locked. Cleanup waits asynchronously for up to two seconds; persistent locks and permission failures remain explicit. Verification.
Release1.43.3 lets you add Responses-compatible model providers and choose their models alongside eligible OpenAI models. It also improves interrupted-switch recovery and adds clearer credit history ranges. The combined desktop picker and individual external providers still need separate compatibility confirmation. Setup, limits and verification.
Complete packages include the .NET runtime; no source build or .NET installation is needed. Keep the entire extracted folder or app bundle.
| Platform | Download |
|---|---|
| Windows x64 | ZIP |
| macOS15+ Apple Silicon | ZIP |
| macOS15+ Intel | ZIP |
| Linux x64 preview | DEB / RPM / tar.gz |
| Linux ARM64 preview | DEB / RPM / tar.gz |
Release notes and SHA256 checksums. Windows/Linux packages are unsigned. Mac bundles are ad-hoc signed and not Apple-notarized; follow Mac setup.
Linux is an integration preview. Native storage, installed UI and package tests are distinct from supported account handoff and full desktop acceptance. Desktop integration requires approved OpenAI Linux client26.1007.71326, an existing file credential policy and X11/XWayland; newer clients require review. CLI-only mode needs an explicit executable checksum and does not resume desktop chats. Requirements and limits / Linux installation
Warning icons retain full hover details; activate one to sign in again for the selected account. Actual application evidence.
Linux1.44.0 downloads include terminal account switching and saved CLI-session resumption, introduced in source1.41.0. CodexSwitch cli manages the existing encrypted accounts without DISPLAY; cli switch <account> --resume <CLI-session-UUID> combines manual switching and official CLI resumption. --continue explicitly submits a follow-up; --exec --continue selects noninteractive continuation. A verified native CLI and an unlocked supported Secret Service are required. Real two-account contextual CLI resumption is verified on Linux x64; native ARM64/offline tests and full desktop acceptance have separate scopes. Commands, actual screenshots and exact verification limits.
- Windows: run
CodexSwitch.exe. Mac: runInstall.command, then open the installed Codex Switch.app. Linux: install a complete preview package and configure a supported Secret Service provider. Installation - Select + for official browser sign-in. If the previous account is automatically selected, use a separate browser profile/private window for the next login. Settings > Import current account imports the current Codex login.
- Compare the cards and select Switch. Account auto-switch is Off by default; enable it explicitly in Settings. On Linux, use Settings > Start Codex before working.
- Models from your providers: save a compatible provider and key, connect Codex, and choose a model for each chat. Keep Switch running while connected. Provider setup and compatibility
- Manual switch, automatic continuation: back up the current login and verify date-prefixed chat names, normally close Codex, apply the selected account, reopen the same chat IDs/folders/models/permissions, and send one Continue to eligible idle unfinished chats. Running or completed work is left alone.
- Recover interrupted handoffs: encrypted checkpoints retain progress. Resume chats continues pending work; uncertain sends are never automatically repeated. Naming/shutdown failures stop the login change. Windows waits for child processes so one Switch click can finish the flow. Switching details
- Quota and history: remaining usage, resets, plans, subscription expiry, reset allowances, credits and consumption forecasts. Open History in an account's ... menu. Card dates use your local time zone; the shared history view explicitly labels its KST axes. Expiry within72hours and reset within48hours use warning colors.
- Local status and resources: running/queued/goal counts, resource history and disk space. Windows shows independently colored resource/disk temperatures when supported sensors exist; missing values stay unknown. Linux resource telemetry is currently unavailable. Sensor support
- Windows disk I/O (source1.40.6): thin read/write bars beside disk temperature, exact rates on hover and sustained latency-pressure colors selected from actual backing-device characteristics. Observed scale is explicit; missing capabilities never invent a rated speed or health warning. How it works
- Built-in Windows CPU temperature: select the visible download + °C or lock + °C button to install the optional signed driver or authorize the sensor for this session. No separate hardware monitor; the account app keeps normal privileges. No automatic driver/UAC/reboot. Setup and limits / actual app before/after.
- Always-on refresh: account reads every60seconds, with ↻ or F5 for an immediate refresh. If startup fails while the keyring/client is unavailable, the same schedule retries initialization automatically after it becomes available.
- Nine UI languages and local JSON language packs: English, Korean, Japanese, Simplified/Traditional Chinese, Spanish, French, German and Brazilian Portuguese, with English fallback. Icon theme actions, dark/light themes and shared scrollbars keep compact windows usable. Translation guide
Switching restarts Codex and may affect CLI/IDE clients sharing the login. Remaining Linux authenticated cross-account/continuation and broader desktop/accessibility criteria are tracked in the support roadmap.
Actual application titlebars/controls are preserved on a solid background. Captions and source/runtime/hash receipts distinguish fictional UI inputs, ordinary Linux execution and authenticated acceptance. Current gallery
Windows x64: actual WPF app with fictional accounts, numbered Pro tiers and explicit account-auto-switch wording. On is selected only in the demo; the default is Off. No personal account or desktop.
Linux x64 · X11/Xfwm4: the actual OS titlebar and four fictional demo account cards were captured together. No titlebar composition or personal login. Light theme, source/hash receipts and verification scope.
MacBook screenshot: reserved for the maintainer's real-device capture.
Contributing / Security / Architecture / CI / Operations / Evidence / Forecasts
Independent open-source software, not an official OpenAI product. Credentials stay in a local encrypted vault. MIT / Asset notices