Windows Sandbox is a built-in security feature available in Windows 11 and Windows 10 Pro, Enterprise, and Education editions. It creates a temporary desktop environment where you can safely run unknown applications, open suspicious files, or test Windows settings without affecting your main system. Everything you do inside Windows Sandbox is isolated from your PC. Any apps you install, files you create, or changes you make are automatically deleted when you close the Sandbox. It gives you a fresh Windows environment every time you start it. In this guide, we’ll explain what Windows Sandbox is, how it works, the system requirements, how to enable it, and the best ways to use it on Windows 11 and Windows 10.
Windows Sandbox at a Glance
| Feature | Details |
|---|---|
| Available on | Windows 11 Pro, Enterprise, and Education editions; Windows 10 Pro, Enterprise, and Education (version 1903 or later) |
| Windows Home | Not supported |
| Purpose | Safely test apps, files, and websites in an isolated environment |
| Virtualization Required | Yes (Intel VT-x or AMD-V must be enabled) |
| Data Persistence | No. Everything is deleted when the Sandbox is closed. |
| Internet Access | Available using your host PC’s network connection |
| Setup Required | Enable the Windows Sandbox feature in Windows Features |
| Best For | Testing unknown software, suspicious files, and Windows settings safely |
What is Windows Sandbox?
Windows Sandbox is a lightweight virtual environment built into Windows that lets you run applications in an isolated instance of Windows without affecting your main PC. It uses Microsoft’s Hyper-V virtualization technology to create a secure space where software runs separately from your primary operating system.
Unlike a traditional virtual machine, Windows Sandbox doesn’t require you to install another copy of Windows or create a virtual hard disk. It launches a clean Windows environment using files from your existing installation, making setup and use much faster.
Each time you open Windows Sandbox, it starts with a fresh Windows installation. Any applications you install, files you download, or settings you change exist only for that session. Once you close Windows Sandbox, everything inside it is permanently deleted, and the next session starts from a clean state.
Because Windows Sandbox is isolated from the host operating system, it’s ideal for testing unknown software, opening suspicious files, or experimenting with Windows settings without risking your personal files or system stability.
How Windows Sandbox Works
Windows Sandbox uses Microsoft’s built-in Hyper-V virtualization technology to create a temporary, isolated Windows environment that runs separately from your main operating system. Instead of installing another copy of Windows like a traditional virtual machine, it uses many of the same system files as your existing Windows installation, making it lightweight and quick to launch.
When you open Windows Sandbox, Windows creates a fresh virtual instance where you can install applications, open files, browse websites, or change settings without affecting your PC. Any changes made inside the Sandbox remain isolated from the host system throughout the session.
Once you close Windows Sandbox, the entire virtual environment is deleted automatically, including installed apps, downloaded files, and any configuration changes. The next time you launch it, Windows creates a brand-new, clean environment.
This disposable design makes Windows Sandbox ideal for safely testing unknown software, opening files from untrusted sources, or experimenting with Windows settings without leaving permanent changes on your computer.
Why Use Windows Sandbox?
Windows Sandbox is useful whenever you want to test something without risking changes to your main Windows installation. Instead of setting up a full virtual machine, you can launch a clean Windows environment in seconds, complete your task, and close it when you’re finished.
Common uses for Windows Sandbox include:
- Test unknown applications before installing them on your main PC.
- Open suspicious files or email attachments in an isolated environment.
- Browse unfamiliar websites with reduced risk to your Windows installation.
- Try Windows settings or registry changes before applying them permanently.
- Test scripts or portable utilities without leaving files behind.
- Experiment with beta or preview software without affecting your daily setup.
Because everything inside Windows Sandbox is automatically deleted when you close it, every session starts with a clean Windows environment.
Windows Sandbox vs Virtual Machine
Although Windows Sandbox and traditional virtual machines both create isolated environments, they are designed for different purposes.
| Feature | Windows Sandbox | Traditional Virtual Machine |
|---|---|---|
| Setup | Built into Windows | Requires virtualization software like Hyper-V, VMware, or VirtualBox |
| Windows installation | Uses your existing Windows files | Requires a separate Windows installation |
| Data persistence | Deleted after every session | Files and settings are saved |
| Startup time | Fast | Usually slower |
| Best for | Testing apps and files safely | Running another operating system or long-term testing |
If you only need to open an unknown application, test a file, or browse a suspicious website safely, Windows Sandbox is usually the better choice because it’s quick to launch and automatically resets after every session.
A traditional virtual machine is a better option when you need a permanent testing environment, want to install another operating system, or need to keep applications, files, and settings between sessions.
Windows Sandbox System Requirements
Before you can enable Windows Sandbox, make sure your PC meets the following requirements:
- Operating System: Windows 11 Pro, Enterprise, or Education, or Windows 10 Pro, Enterprise, or Education (version 1903 or later).
- Processor: 64-bit CPU with Intel VT-x or AMD-V virtualization support.
- Memory: At least 4 GB RAM (8 GB or more recommended for better performance).
- Storage: At least 1 GB of free disk space, although an SSD is recommended for faster startup.
- Processor Cores: Minimum 2 CPU cores (4 or more cores recommended).
- Virtualization: Hardware virtualization must be enabled in the BIOS or UEFI firmware.
Note: Windows Sandbox isn’t available in Windows Home editions. If you’re using Windows Home, you’ll need to upgrade to a supported edition or use another virtualization solution such as Hyper-V (where available), VMware Workstation, or VirtualBox.
How to Check if Virtualization Is Enabled
Windows Sandbox requires hardware virtualization to be enabled before it can run. You can quickly check its status from Task Manager.
- Press Ctrl + Shift + Esc to open Task Manager.
- If needed, click More details.
- Select the Performance tab.
- Click CPU in the left pane.
- Look for Virtualization in the information panel.
- If it shows Enabled, your PC is ready for Windows Sandbox.
- If it shows Disabled, you’ll need to enable Intel VT-x or AMD-V in your computer’s BIOS or UEFI settings before continuing.
Tip: Most modern PCs support hardware virtualization, but it may be disabled by default depending on your motherboard or system manufacturer.
Enable Virtualization in BIOS or UEFI
If virtualization is disabled, you’ll need to enable it in your computer’s BIOS or UEFI firmware before you can use Windows Sandbox.
- Restart your computer.
- During startup, press the BIOS key repeatedly (commonly F2, Delete, F10, or Esc). The correct key varies by manufacturer.
- In the BIOS or UEFI settings, locate the Virtualization option. Depending on your system, it may be listed as:
- Intel Virtualization Technology (VT-x) on Intel processors
- SVM Mode or AMD-V on AMD processors
- Change the setting to Enabled.
- Save your changes and restart your computer.
After Windows starts, open Task Manager > Performance > CPU to confirm that Virtualization now shows as Enabled.
Note: The location and name of the virtualization setting vary between motherboard and laptop manufacturers. If you can’t find the option, check your device manufacturer’s support documentation.
How to Enable Windows Sandbox
Once virtualization is enabled, you can enable Windows Sandbox from the optional features.
- Press Windows + R, type optionalfeatures, and press Enter.
- In the Windows Features window, scroll down and check Windows Sandbox.
- Click OK and wait while Windows installs the required components.
- When prompted, restart your computer to complete the installation.
After your PC restarts, click the Start menu, search for Windows Sandbox, and open the application. Windows will prepare a clean virtual desktop, which may take a few moments the first time you launch it.
If you don’t see Windows Sandbox in the Windows Features list, verify that you’re using a supported Windows edition and that hardware virtualization is enabled in your BIOS or UEFI settings.
Tip: If Windows Sandbox fails to start, install the latest Windows updates and restart your PC before trying again.
How to Use Windows Sandbox
Using Windows Sandbox is similar to using a regular Windows desktop, but every session starts with a clean environment.
- Open Windows Sandbox from the Start menu.
- Wait a few moments while Windows creates the temporary desktop.
- Copy the application, file, or script you want to test into the Sandbox using Copy and Paste or Drag and Drop.
- Run the application or open the file just as you would on your main PC.
- Observe how it behaves or make any changes you want to test.
You can also use Windows Sandbox to browse websites, install software, or experiment with Windows settings without affecting your primary Windows installation.
When you’re finished, simply close the Windows Sandbox window. Windows will display a confirmation message explaining that everything inside the Sandbox will be permanently deleted. Click OK to close it.
Important: Any files, installed applications, or changes made inside Windows Sandbox are automatically deleted when you close it. If you want to keep a file, copy it back to your main PC before exiting the Sandbox.
Best Ways to Use Windows Sandbox
Windows Sandbox is designed for quick, disposable testing. Here are some of the most practical ways to use it:
- Test downloaded software before installing it on your main PC, especially if it comes from an unfamiliar source.
- Open suspicious files or email attachments in an isolated environment to reduce the risk of malware affecting your system.
- Try portable applications without leaving files or registry changes behind.
- Experiment with Windows settings or registry tweaks before applying them to your primary installation.
- Run beta or preview software to see how it works without impacting your everyday setup.
- Browse unfamiliar websites when you want an extra layer of isolation from your main Windows environment.
Windows Sandbox is best suited for short-term testing. If you need to save files, install another operating system, or maintain a long-term test environment, a traditional virtual machine such as Hyper-V, VMware, or VirtualBox is a better choice.
Windows Sandbox Limitations
Although Windows Sandbox is excellent for quickly testing applications and files, it isn’t designed to replace a traditional virtual machine. Before using it, keep these limitations in mind:
- Nothing is saved after you close it. All installed applications, files, and settings are permanently deleted.
- Only available on supported editions. Windows Sandbox isn’t included in Windows Home.
- Requires hardware virtualization. Your processor must support Intel VT-x or AMD-V, and virtualization must be enabled in BIOS or UEFI.
- Not intended for long-term testing. If you need to save your work or maintain a persistent environment, a virtual machine is a better choice.
- Hardware access is limited. Some hardware devices and advanced virtualization features aren’t available inside Windows Sandbox.
Despite these limitations, Windows Sandbox remains one of the quickest and easiest ways to safely test software without making permanent changes to your computer.
Final Thoughts
Windows Sandbox is one of the easiest ways to test applications, files, and websites without putting your main Windows installation at risk. Because every session starts with a clean environment and automatically removes all changes when closed, it’s an excellent tool for quick software testing and troubleshooting. If your PC meets the requirements, enabling Windows Sandbox is a simple way to add an extra layer of security when working with unknown or untrusted content.
Frequently Asked Questions (FAQ)
Yes. Windows Sandbox is included at no extra cost with supported editions of Windows 11 and Windows 10, including Pro, Enterprise, and Education. It isn’t available on Windows Home.
Yes. Windows Sandbox uses hardware-assisted virtualization to isolate applications from your main operating system. Any files, apps, or changes made inside the Sandbox are deleted when you close it, helping protect your PC while testing unknown software.
Windows Sandbox may not appear if you’re using Windows Home, hardware virtualization is disabled in BIOS or UEFI, or the feature hasn’t been enabled in Windows Features.
No. Windows Sandbox is a temporary environment. Everything created or installed inside it is permanently deleted when you close the application. Copy any files you want to keep back to your main PC before exiting.
Most standard Windows desktop applications work normally inside Windows Sandbox. However, applications that require direct access to specialized hardware, advanced virtualization features, or persistent system changes may not function as expected.
