Protecting installation

How to enable Sandbox on Windows 11

Windows Sandbox lets you run untrusted apps isolated from the Windows 11 installation, and here's how to enable the feature.

Windows 11 enable Sandbox

On Windows 11, “Windows Sandbox” is a minimal installation of Windows that is isolated from the main installation that you can use to run untrusted applications without exposing your device.

Sandbox is available on Windows 11 Pro and Enterprise, and it uses Microsoft’s Hyper-V technology to create a lightweight virtual machine on-demand to run a separate kernel that separates the Windows Sandbox session from the host. In other words, this is a small installation of Windows 11 of just around 100MB enough to run the desktop environment to test applications. Once you finish testing the application, closing the feature will delete the Sandbox environment, which means that every time you start the feature, you will start with a fresh install of Windows 11.

In this guide, you will learn the steps to enable Windows Sandbox on Windows 11.

Enable Windows Sandbox on Windows 11

To enable “Windows Sandbox” to run untrusted apps, use these steps:

  1. Open Start on Windows 11.

  2. Search for Turn Windows features on or off and click the top result to open the experience.

  3. Check the Windows Sandbox option.

    Windows 11 enable Sandbox

  4. Click the OK button.

  5. Click the Restart now button.

After you complete the steps, you can start the app from the Start menu. Once you run the app, you will be presented with a regular Windows desktop environment where you can install and run untrusted applications without affecting the current installation. When you are finished, closing the app will delete the entire virtual machine and anything you have installed on it.