Repository navigation
Account Profiles
Account Profiles keeps a list of Roblox identities you use, and can optionally confirm which account the desktop Roblox client is currently signed in as.
A profile contains public identity only — never credentials.
Selecting a profile does not switch Roblox sessions. It marks which profile you consider current in GokuTrap's UI.
| Field | Source |
|---|---|
| Roblox user ID | You enter it |
| Display name | Fetched from Roblox's public API |
| Username | Public |
| Avatar | Public thumbnail URL |
| Nickname | Local label you choose, up to 80 characters |
| Selected | Whether you marked it current |
Never stored: cookies, tokens, passwords, session keys, or any other authentication material.
Enter a positive Roblox user ID. GokuTrap fetches the public display name and avatar.
- An invalid or non-positive ID is rejected with "Enter a positive Roblox user ID."
- If the profile has been removed or is unavailable, GokuTrap says "Public profile unavailable or removed" rather than showing a stale name.
- This works with cookie access off.
Validates the account the Roblox desktop client is currently signed in to. This requires cookie access — see below.
Desktop validation tells you which account the desktop client is signed in as. It does not switch accounts.
- Enable Allow the existing current-user DPAPI cookie reader — the cookie opt-in inside Account-Profiles. Public profiles work without it.
- Roblox signed in on the desktop client.
- Official sign-in handoff… opens Roblox's official sign-in page in your browser, after a confirmation prompt. GokuTrap explicitly states it does not silently sign anyone out and does not modify any cookie store.
- Complete sign-in there if necessary.
- Press Refresh & validate session.
| Status | Meaning |
|---|---|
| "Desktop identity validated: {name} (ID {id}). Selection does not change this session." | Success |
| "Desktop session is unavailable, expired or revoked." | No profile is marked active. Complete official sign-in and refresh |
| "No authenticated desktop account validated in this session." | Validation has not run, or ran without an authenticated session |
- Signing in on the web may not authenticate the desktop client. Roblox's website and its desktop client can have different sessions. Refresh after signing in in the official desktop client.
- Validation status is reset to "not validated" every time GokuTrap starts. A stale label from a previous run is never trusted, so the UI cannot claim a session is valid when it is not.
- An HTTP 401 invalidates the cached session rather than leaving it looking valid.
- Refreshing a public avatar never marks a session as authenticated.
| Action | Effect |
|---|---|
| Select profile | Marks it as your current profile in GokuTrap. Reports: "Profile selected and saved. Roblox's authenticated session has not changed." |
| Rename locally | Changes your local nickname only. Nothing on Roblox changes |
| Remove profile | Deletes the profile from GokuTrap. Does not affect any Roblox account |
Roblox exposes no supported seamless desktop session-switching API that a launcher can call. Signing a different account into the desktop client is something you do in Roblox's own client — GokuTrap cannot do it for you, and attempting to do so by manipulating cookie stores would be both unsupported and unsafe.
So GokuTrap does the honest thing: it manages public profiles, and it tells you the truth about the current desktop session. See Platform-Limits.
Account validation describes the desktop client's session. It is independent of which game window you are in and independent of how many Player processes are running.