security.md Codex Docs, 2026-02-19 20:37 UTC → 2026-02-23 18:27 UTC

1# Codex Security1# Codex Security

2 2 

3How to securely operate and manage Codex agents

4 

5Codex helps protect your code and data and reduces the risk of misuse.3Codex helps protect your code and data and reduces the risk of misuse.

6 4 

7By default, the agent runs with network access turned off. Locally, Codex uses an OS-enforced sandbox that limits what it can touch (typically to the current workspace), plus an approval policy that controls when it must stop and ask you before acting.5By default, the agent runs with network access turned off. Locally, Codex uses an OS-enforced sandbox that limits what it can touch (typically to the current workspace), plus an approval policy that controls when it must stop and ask you before acting.

91 89 

92#### Configuration in `config.toml`90#### Configuration in `config.toml`

93 91 

92For the broader configuration workflow, see [Config basics](https://developers.openai.com/codex/config-basic), [Advanced Config](https://developers.openai.com/codex/config-advanced#approval-policies-and-sandbox-modes), and the [Configuration Reference](https://developers.openai.com/codex/config-reference).

93 

94```94```

95# Always ask for approval mode95# Always ask for approval mode

96approval_policy = "untrusted"96approval_policy = "untrusted"

230 230 

231## Managed configuration231## Managed configuration

232 232 

233Enterprise admins can control local Codex behavior in two ways:233Enterprise admins can control local Codex behavior in two ways. For the exact key list, see the [`requirements.toml` section in Configuration Reference](https://developers.openai.com/codex/config-reference#requirementstoml):

234 234 

235- **Requirements**: admin-enforced constraints that users can’t override.235- **Requirements**: admin-enforced constraints that users can’t override.

236- **Managed defaults**: starting values applied when Codex launches. Users can still change settings during a session; Codex reapplies managed defaults the next time it starts.236- **Managed defaults**: starting values applied when Codex launches. Users can still change settings during a session; Codex reapplies managed defaults the next time it starts.