Windows Sandbox: How to Test Untrusted Apps Without Touching Your Real PC

Windows Sandbox lets you test untrusted apps safely on Windows 11. Enable it in minutes and try any installer without risking your real PC.

I’ve downloaded plenty of installers from small developer sites and forum links where I genuinely couldn’t tell if the .exe was safe. Running it straight on my main Windows 11 machine felt like a gamble every time. Windows Sandbox solves that problem by giving you a disposable, isolated desktop that throws itself away the moment you close it.

The crux is this: Windows Sandbox is a full, temporary copy of Windows that runs inside your real Windows 11 install, so anything an untrusted app does — installs, registry changes, malware — never touches your actual files, drivers, or settings.

Quick Answer

Windows Sandbox is a free, built-in Windows 11 Pro/Enterprise feature that launches an isolated, temporary desktop for testing unknown apps. Enable it once in Windows Features, then open it from the Start menu, drag in an installer, and run it. Close the window and every trace disappears — no cleanup, no snapshots, no risk to your real system.

What Is Windows Sandbox and How Does It Work?

Windows Sandbox is a lightweight virtual machine that Microsoft builds directly into Windows 11. Unlike a full VM in something like VirtualBox, it uses your existing Windows installation files instead of a separate disk image, so it starts in seconds rather than minutes.

Every time you open it, you get a completely clean desktop. Every time you close it, that desktop — along with anything you installed or downloaded inside it — is permanently discarded. Nothing persists between sessions, which is exactly what you want when you’re testing something you don’t fully trust yet.

In short: Windows Sandbox is a throwaway Windows desktop that resets itself every time you close it.

How Do I Turn On Windows Sandbox on Windows 11?

Check Your Windows 11 Edition First

Windows Sandbox only ships with Windows 11 Pro, Enterprise, and Education. If you’re on Home edition, the feature won’t appear in the list at all — you’d need to upgrade to Pro to get it. You also need virtualization enabled in your BIOS/UEFI, which is on by default on most modern PCs.

Enable the Windows Sandbox Feature

  1. Press Win, type “Turn Windows features on or off,” and open it.
  2. Scroll down and check the box next to “Windows Sandbox.”
  3. Click OK and let Windows install the feature.
  4. Restart your PC when prompted.

Launch Windows Sandbox for the First Time

After the restart, press Win, type “Windows Sandbox,” and open it. On my first launch it took about 15 seconds to boot into a bare Windows 11 desktop — no icons, no installed apps, just the taskbar and a browser shortcut.

Enabling Windows Sandbox takes one checkbox and one restart, and it only works on Pro, Enterprise, or Education editions.

How Do I Test an App Inside Windows Sandbox?

Copy the Installer Into the Sandbox

Drag and drop the installer file from your real desktop straight into the Sandbox window. You can also copy a file on your host machine and paste it inside the Sandbox — clipboard sharing works both ways by default.

Run and Watch the App’s Behavior

Double-click the installer inside the Sandbox exactly as you would on your main PC. Watch for anything odd: unexpected extra installers bundling in, browser homepage changes, or new startup entries. Since this is an isolated copy of Windows, none of that follows you back out.

Close the Sandbox When You’re Done

Close the Windows Sandbox window like any other app. You’ll get a warning that all Sandbox data will be discarded — click Yes. There’s no save state and no export; that’s the entire point.

Testing inside Sandbox means dragging the file in, running it, and closing the window to erase every trace.

Windows Sandbox vs Virtual Machine vs Antivirus Scan: Which Should You Use?

Windows Sandbox isn’t your only option for vetting an unknown file. Here’s how it stacks up against the two alternatives I reach for most often.

Method Setup Time Best For
Windows Sandbox Under 2 minutes (one-time) Running an installer to see what it actually does
Full Virtual Machine (VirtualBox/Hyper-V) 20-30 minutes per VM Long-term testing, snapshots, or non-Windows OS testing
Antivirus / online scan Under 1 minute A fast static check before you even open the file

Windows Sandbox wins on speed and zero maintenance; a full VM wins when you need to keep and compare results across sessions.

How Do I Fix Windows Sandbox When It Won’t Start?

If Windows Sandbox greys out in the features list or fails to launch, the fix is almost always virtualization-related.

Confirm Virtualization Is On

Open Task Manager, go to the Performance tab, and check that “Virtualization” reads Enabled under CPU. If it says Disabled, you need to turn on Intel VT-x or AMD-V in your BIOS/UEFI settings.

Check for Conflicting Software

Sandbox can fail to start if another hypervisor, like VirtualBox running in a non-Hyper-V-compatible mode, is holding the CPU’s virtualization extensions. Close other VM software before opening Sandbox.

Pro tip: If Sandbox hangs on a black screen for more than a minute, don’t force-close it immediately — the first boot after enabling the feature sometimes takes longer while Windows finishes provisioning the base image.

Troubleshooting tip: Run DISM /Online /Cleanup-Image /RestoreHealth in an elevated terminal if Sandbox installs but crashes on every launch — a corrupted system image was the culprit the one time this happened to me.

Most Sandbox failures trace back to disabled virtualization or a conflicting hypervisor, both fixable without reinstalling Windows.

Common Mistakes to Avoid

  • Assuming Sandbox works on Windows 11 Home. It doesn’t — upgrade to Pro or use a full VM instead.
  • Treating Sandbox as a permanent test environment. Everything resets on close, so don’t install tools you plan to reuse; set up a real VM for that.
  • Skipping the virtualization check in BIOS. If the feature won’t even install, verify VT-x/AMD-V is on before troubleshooting anything else.
  • Downloading the file into Sandbox instead of dragging it in. Browsing inside Sandbox works, but dragging a file you already vetted a little is faster and avoids re-downloading through a slower virtualized network stack.
  • Ignoring red flags because “it’s just a test.” Note what the installer does inside Sandbox — bundled toolbars, odd network requests — before deciding whether to trust it on your real PC at all; a quick look at how to spot a fake app before you install it helps you catch trouble before you even reach for Sandbox.

Frequently Asked Questions

Does Windows Sandbox slow down my PC while it’s running?
It uses a modest slice of CPU and RAM while open, similar to running a lightweight VM. On my 16GB laptop I didn’t notice a slowdown in other apps, but on an 8GB machine, close a few browser tabs first.

Can I install real software permanently using Windows Sandbox?
No, nothing installed inside Sandbox survives after you close it. If you want a persistent isolated environment, set up a dedicated virtual machine instead.

Is Windows Sandbox available on Windows 10?
Yes, on Windows 10 Pro and Enterprise (version 1903 and later) through the same “Turn Windows features on or off” menu I used above.

Does Windows Sandbox protect me from every kind of malware?
It isolates most file-based threats effectively, but it’s not a substitute for antivirus on your main PC. I still run a normal AV scan on anything I later decide is safe enough to install for real.

Why does my Sandbox window look completely empty with no apps?
That’s expected — Sandbox boots a bare Windows image with no third-party software preinstalled. If you need a browser or specific tool for testing, grab one of the many built-in Windows 11 settings and tools already available, or install it fresh inside the session.

Can I copy files out of Sandbox before closing it?
Yes, clipboard and drag-and-drop work in both directions, so you can pull a log file or screenshot out before you close the window and lose everything else.

Conclusion

Windows Sandbox turned “I hope this installer is safe” into a two-minute test I actually run before opening anything questionable. Enable it once, and it’s there every time you need a disposable desktop. For more built-in Windows 11 features worth setting up, check my guide to automatic file backups on Windows 11, and see Microsoft’s own Windows Sandbox documentation for the full technical rundown.