Title: Connecting to your sandbox Author: Boro Sitnikovski Published: August 25, 2026 --- # Connecting to your sandbox ## In this article * [SSH](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#ssh) * [Where things live](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#where-things-live) * [Viewing your sandbox in a browser](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#viewing-your-sandbox-in-a-browser) - [Testing from the command line](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#testing-from-the-command-line) * [De-sandboxing](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#de-sandboxing) [↑ Back to top](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#wp--skip-link--target) Once your [access request](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/requesting-access/) is approved you will have a sandbox hostname and a username. ## 󠀁[SSH](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#ssh)󠁿 Add a blockBlock Block is the abstract term used to describe units of markup that, composed together, form the content or layout of a webpage using the WordPress editor. The idea combines concepts of what in the past may have achieved with shortcodes, custom HTML, and embed discovery into a single consistent API and user experience. like this to `~/.ssh/config` so you do not have to retype the details: ```wp-block-code Host wporgsandbox HostName User ForwardAgent yes IdentitiesOnly yes IdentityFile ~/.ssh/id_ed25519 ``` Replace the placeholders with the values from your access grant, and point `IdentityFile` at the key you supplied when you requested access. Then: ```wp-block-code ssh wporgsandbox ``` `ForwardAgent yes` forwards your local SSHSSH Secure SHell – a protocol for securely connecting to a remote system in addition to or in place of a password. agent to the sandbox, which is what lets you push to GitHubGitHub GitHub is a website that offers online implementation of git repositories that can easily be shared, copied and modified by other developers. Public repositories are free to host, private repositories require a paid subscription. GitHub introduced the concept of the ‘ pull request’ where code changes done in branches by contributors can be reviewed and discussed before being merged by the repository owner. [https://github.com/](https://github.com/) from there without copying a private key onto a shared server. **Do not copy your private key to the sandbox.** ## 󠀁[Where things live](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#where-things-live)󠁿 | Path | What it is | | `/home/` | Your sandbox home directory | | `/home/wporg/public_html` | The WordPress.orgWordPress.org The community site where WordPress code is created and shared by the users. This is where you can download the source code for WordPress core, plugins and themes as well as the central location for community conversations and organization. [https://wordpress.org/](https://wordpress.org/) web root | | `/home/wordcamp/public_html` | The WordCamp.org web root | | `/home/buddypress/public_html` | BuddyPress-hosted sites, including profiles.wordpress.org | ## 󠀁[Viewing your sandbox in a browser](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#viewing-your-sandbox-in-a-browser)󠁿 You do not need a proxy or a VPN for this. What you do need is for the WordPress. org domains to resolve to your sandbox instead of to production. Requesting the sandbox address directly returns a 403, because nothing tells the server which site you are asking for. Add the sandbox address supplied with your access grant to `/etc/hosts`, one line per domain you need: ```wp-block-code wordpress.org www.wordpress.org plugins.wordpress.org themes.wordpress.org translate.wordpress.org make.wordpress.org ``` Add only the domains you are actually working on. Every line you add is a domain your browser can no longer reach in production. These entries stay active until you remove them. If WordPress.org starts behaving strangely in your browser days later, check `/etc/hosts` before you check anything else. ### 󠀁[Testing from the command line](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#testing-from-the-command-line)󠁿 `curl` can override DNSDNS DNS is an acronym for Domain Name System – how you assign a human readable address to a website’s exact numeric coded location (ie. wordpress. org uses the actual IP address 198.143.164.252). for a single request, which avoids editing `/etc/hosts` at all: ```wp-block-code curl --resolve wordpress.org:443: https://wordpress.org/ ``` Add `--insecure` if the sandbox presents a certificate that does not match the domain. ## 󠀁[De-sandboxing](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/connecting/?output_format=md#de-sandboxing)󠁿 Some operations must not run against a sandbox — most notably anything that uploads media. When you need to act as a normal user again, de-sandbox yourself before continuing. See [Working on a sandbox](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/working-on-a-sandbox/). First published August 25, 2026 Last updated August 25, 2026 [ Previous: WordPress.org Sandboxes](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/) [ Next: Deploying WordCamp.org](https://make.wordpress.org/meta/handbook/tutorials-guides/wordpress-org-sandboxes/deploying-wordcamp-org/)