app/windows.md +21 −6
1# Windows1# Windows
2 2
33The [Codex app for Windows](https://apps.microsoft.com/detail/9plm9xgg6vks?hl=en-US&gl=US) gives you one interface forThe [Codex app for Windows](https://get.microsoft.com/installer/download/9PLM9XGG6VKS?cid=website_cta_psi) gives you one interface for
4working across projects, running parallel agent threads, and reviewing results.4working across projects, running parallel agent threads, and reviewing results.
5It runs natively on Windows using PowerShell and the5It runs natively on Windows using PowerShell and the
6[Windows sandbox](https://developers.openai.com/codex/windows#windows-sandbox), or you can configure it to6[Windows sandbox](https://developers.openai.com/codex/windows#windows-sandbox), or you can configure it to
77run in [Windows Subsystem for Linux (WSL)](#windows-subsystem-for-linux-wsl).run in [Windows Subsystem for Linux 2 (WSL2)](#windows-subsystem-for-linux-wsl).
8 8
99
10 10
11## Download and update the Codex app11## Download and update the Codex app
12 12
13Download the Codex app from the13Download the Codex app from the
1414[Microsoft Store](https://apps.microsoft.com/detail/9plm9xgg6vks?hl=en-US&gl=US).[Microsoft Store](https://get.microsoft.com/installer/download/9PLM9XGG6VKS?cid=website_cta_psi).
15 15
16Then follow the [quickstart](https://developers.openai.com/codex/quickstart?setup=app) to get started.16Then follow the [quickstart](https://developers.openai.com/codex/quickstart?setup=app) to get started.
17 17
25the Microsoft Store UI, run:25the Microsoft Store UI, run:
26 26
27```powershell27```powershell
2828winget install --id 9PLM9XGG6VKSwinget install Codex -s msstore
29```29```
30 30
31## Native sandbox
32
33The Codex app on Windows supports a native [Windows sandbox](https://developers.openai.com/codex/windows#windows-sandbox) when the agent runs in PowerShell, and uses Linux sandboxing when you run the agent in [Windows Subsystem for Linux 2 (WSL2)](#windows-subsystem-for-linux-wsl). To apply sandbox protections in either mode, set sandbox permissions to **Default permissions** in the Composer before sending messages to Codex.
34
35Running Codex in full access mode means Codex is not limited to your project
36 directory and might perform unintentional destructive actions that can lead to
37 data loss. Keep sandbox boundaries in place and use [rules](https://developers.openai.com/codex/rules) for
38 targeted exceptions, or set your [approval policy to
39 never](https://developers.openai.com/codex/agent-approvals-security#run-without-approval-prompts) to have
40 Codex attempt to solve problems without asking for escalated permissions,
41 based on your [approval and security setup](https://developers.openai.com/codex/agent-approvals-security).
42
31## Customize for your dev setup43## Customize for your dev setup
32 44
33### Preferred editor45### Preferred editor
59 71
60By default, the Codex app uses the Windows-native agent. That means the agent72By default, the Codex app uses the Windows-native agent. That means the agent
61runs commands in PowerShell. The app can still work with projects that live in73runs commands in PowerShell. The app can still work with projects that live in
6274Windows Subsystem for Linux (WSL) by using the `wsl` CLI when needed.Windows Subsystem for Linux 2 (WSL2) by using the `wsl` CLI when needed.
63 75
64If you want to add a project from the WSL filesystem, click **Add new project**76If you want to add a project from the WSL filesystem, click **Add new project**
65or press <kbd>Ctrl</kbd>+<kbd>O</kbd>, then type `\\wsl$\` into the File77or press <kbd>Ctrl</kbd>+<kbd>O</kbd>, then type `\\wsl$\` into the File
71`/mnt/<drive>/...`. This setup is more reliable than opening projects83`/mnt/<drive>/...`. This setup is more reliable than opening projects
72directly from the WSL filesystem.84directly from the WSL filesystem.
73 85
7486If you want the agent itself to run in WSL, open **[Settings](codex://settings)**,If you want the agent itself to run in WSL2, open **[Settings](codex://settings)**,
75switch the agent from Windows native to WSL, and **restart the app**. The87switch the agent from Windows native to WSL, and **restart the app**. The
76change doesn't take effect until you restart. Your projects should remain in88change doesn't take effect until you restart. Your projects should remain in
77place after restart.89place after restart.
78 90
91WSL1 was supported through Codex `0.114`. Starting in Codex `0.115`, the Linux
92sandbox moved to `bubblewrap`, so WSL1 is no longer supported.
93
7994
80 95
81You configure the integrated terminal independently from the agent. See96You configure the integrated terminal independently from the agent. See