What’s new in Sandvox

Sandvox Hosting

Sandvox 2.10 now includes a new, integrated hosting choice for websites built with Sandvox. To try it, use ‘Setup Host’ to create a 14-day free trial account and publish your site! There are no other settings to figure out. Show me how »

Choose from 4 great plans.

From the monthly “Starter” ($7.99) on up through the “Mega” plan - the biggest!

Custom domains?

Yes, they are available with the Single, Multi and Mega plans.

Basic email forwarding?

Yes, it is available with the Single, Multi and Mega plans.

Upgrade to Sandvox 2.10 or download the demo to get started.

Detailed Release Notes

Version: 2.10.12, September 26, 2018

  • Mojave compatibility fixes

Version: 2.10.11, November 17, 2017

  • Improved support for having your Sandvox published pages hosted through HTTPS. Contact form, Google maps, feeds, counter, and other services now work properly if your pages are served through HTTPS.

Version: 2.10.10, July 31, 2017

Bug fixes

  • Fixes crash on launch bug in OS X 10.6 that was introduced in version 2.10.9

Version 2.10.9 changes

  • Improve FTPS protocol support (TLS 1.1 and 1.2 support)
  • Ask for the SSH key password if the key file is password protected
  • Fix blank page opening in browser in purchase window

Version: 2.10.9, July 19, 2017

  • Improve FTPS protocol support
  • Ask for the SSH key password if the key file is password protected
  • Fix blank page opening in browser in purchase window

Version: 2.10.8, September 20, 2016

  • Fix crash that happens when publishing to FTP or SFTP sites in macOS Sierra
  • On macOS Sierra, newly created documents will have simpler language code if one of Sandvox's main supported languages.
  • Work around some errors that were preventing Google Maps from appearing properly in Sandvox's preview
  • Allow for older Vimeo video IDs less than 8 characters
  • Turn off video preload when turning off video autoplay, fixing issue with poster images

Version: 2.10.7, June 23, 2016

Bug Fixes

  • Indent <pre ...> tags properly in Raw HTML objects
  • Disable text substitution in Raw HTML and code injection input fields

Version: 2.10.6, March 29, 2016

  • Remove "send from karelia.com" from contact form since this is now a required behavior. More info in forum post.
  • Show certain FTP connection errors in the window, not just log them

Version: 2.10.5, February 24, 2016

  • Don't show Debug menu

Version: 2.10.4, February 17, 2016

  • Use HTTPS to connect to our Sparkle update server to address security issue. Update to Sparkle 1.6.1 for HTTPS compatibility.
  • Addresses a crash when browsing a server during host setup
  • Clicking Host Setup "Verify" button immediately accepts any changes made to input fields without requiring user to tab out of them
  • Address an error condition when replacing a media placeholder with a movie at an external URL

Version: 2.10.3, October 14, 2015

New Features

  • Improved full-screen support on YouTube videos

Bug Fixes

  • Document would fail to open if the "Arial" font is not available
  • Fixed bug where publishing to Sandvox Hosting would try to delete old files and fail, retrying every time you published
  • Improved reliability when creating missing directories on an SFTP server
  • Addresses a crash which could happen when connecting to a remote server


  • Amazon List: Restored functionality to "enhanced" and "shuffle" layouts, and restored "Use product preview popups", to keep up with changes on Amazon's part. Some international Amazon stores may not show the product; we are investigating this issue and will update Sandvox as we find out more. In the meantime, the basic layouts should continue to work just fine.

Version: 2.10.2, August 23, 2015

Publishing to a Folder

  • Worked around a hang which could occur when publishing to a folder on OS X 10.7 Lion or later
  • file: URLs can be specified for the site URL
  • Improved workflow when publishing to a folder by default
    • The “Publish” command takes immediate effect, rather than confirming the location with you first. You can change location if needed by selecting “Publish to Folder” instead
    • At the end of publishing, the Share panel is presented again
    • Fixed an issue which happened if the usual target folder can not be found

Publishing to a Remote Server

  • Improved reliability of re-connecting to FTP and SFTP servers
  • Fixed a bug where some intermediate directories weren’t being created over SFTP if needed

Publishing in General

  • Fixed an issue which would occur in the rare circumstance of publishing a file to a location that Sandvox believes to currently be a folder
  • Fixed a crash when canceling publishing
  • Addressed a rare issue where a media file could be named with a space, rendering it incompatible with some servers


  • Amazon objects are a bit more tolerant of malformed associates IDs.
  • Contact Form specify their encoding consistently for better international support

Version: 2.10.1, April 15, 2015

Bug Fixes

  • Fixed: Choosing Setup Host and clicking "Done" would cause entire website to need to be republished
  • Fixed: Certain situation signing into Sandvox Hosting would crash. Crash avoided and additional diagnostics in place now.
  • Fixed: Publishing to a folder, without having hosting already configured would crash
  • Fixed crash when publishing finishes on OS X 10.6 Snow Leopard

Version: 2.10, April 7, 2015

New Features

  • Sandvox Hosting! This version integrates with Karelia Software's new Sandvox Hosting service.
  • The Host Setup Assistant now integrates directly with Sandvox Hosting, plus dramatically simplifies the process of setting and testing third-party hosting providers as well.
  • The act of exporting a site and the act of publishing onto the local computer via the Host Setup Assistant have been unified into a "Publish to Folder" menu item. The "Publish to this folder by default" checkbox allows repeated publication to that same folder.
  • Those Sandvox designs that use Google fonts will load them asynchronously, which means that these websites will load (though without Google fonts) from places like China that block them. Third-party designs will need updating to take advantage of this.

Version: 2.9.5, March 17, 2015

Bug Fixes

  • Fixes a recently-discovered security flaw in the library used to connect to SFTP servers (libssh2)

Version: 2.9.4, March 12, 2015


  • Resolved an issue where graphical text wasn’t publishing for some sites
  • Improved compatibility with Microsoft WebDAV servers
  • Fixed a crash when browsing some WebDAV servers
  • Worked around an issue where directories weren’t being created during publishing to some SFTP servers


  • Design fixes
  • Better compatibility of page headers with modern versions of Internet Explorer

Other Bug Fixes

  • A crash when creating links
  • Handling of collections with invalid file names
  • Closing a document and choosing to revert changes would cause it to spring back open again

Plug-In Developers

  • Fixed API for generating a full-size image

Version: 2.9.3, December 16, 2014


  • Addresses an issue where some objects could disappear within Sandvox on OS X 10.10 Yosemite
  • Resolves an issue where composing a message to share a page on OS X 10.10 Yosemite would appear to have no link
  • Improves post-publishing sharing popup button compatibility with OS X 10.10 Yosemite
  • Addresses an issue where exporting on OS X 10.6 Snow Leopard would result in the document window becoming unresponsive

Version: 2.9.2, October 30, 2014


  • Fixes display of Sharing icon in publishing-complete sheet on OS X 10.10 Yosemite
  • Places Inspector correctly when reopening after quitting and relaunching on OS X 10.7 Lion and later
  • Improves reliability of SFTP authentication during publishing on OS X 10.6 Snow Leopard

Other Changes

  • Addresses issues when publishing with certain host setup settings
  • Improves handling of corrupted syndication count
  • Fix issue with Sparkle preference not being loaded correctly

Version: 2.9.1, October 15, 2014

Host Setup and Publishing

  • Resolves issue where browsing folders on a server would result in infinite log-in failures, potentially resulting in a ban from the server in question
  • Better detection and handling of hosting providers which require permissions to be set on files after Sandvox uploads them
  • Disables the New Folder button while in the middle of loading up a folder’s contents
  • Improved detection of long uploads caught out by FTP’s idle timeout issue

Designs and Markup

  • Fixes several designs to avoid unnecessary horizontal scroll bar
  • Fixes the viewport for Black and White design
  • Ensures that hierarchical menu & print style code gets loaded properly from UTF-16 encoded websites
  • Modifies bundled jquery to not request “map” in WebKit inspector

Other Changes

  • Updates to help pages

Version: 2.9, September 23, 2014


Contact Forms now have the “Send from Karelia” option checked by default if it had not explicitly been turned off before. This is to help reduce the number of messages lost due to mistyped “from” addresses or aggressive spam filters on the receiving end. A few Sandvox users may want to turn this checkbox off if they are relying on the old behavior for any mail-processing rules or scripts. (Or, better yet, update those mail-processing rules or scripts.)

  • New object for playing videos hosted on Vimeo
  • Improves handling of images which have accidentally been set to have “auto” width or height
  • Corrects an issue where pasting or dragging pages to duplicate them could end up shrinking photos


We’ve added support for additional publishing protocols:

  • FTP with Implicit SSL
  • FTP with TLS/SSL
  • WebDAV with HTTPS

The full suite of protocols is available during Host Setup. If you’ve previously chosen to publish to an FTP server, Sandvox will guess whether to use FTP or FTPS based on your previous preferences. If this guess is wrong, you just need to edit your Host Setup, selecting the correct protocol to use.

Sandvox is now stricter about certificate handling when connecting to a server using TLS/SSL (i.e. publishing using HTTPS or one of the FTPS protocols). Certificates must be deemed valid by your Mac, either because they’ve been signed by a recognized authority (this is the normal case), or your Keychain has been configured to make an exception for this particular certificate/server. If at all possible, we recommend hosting providers use a suitable certificate and upload settings. If not, third-party FTP clients such as Transmit can generally be used to generate a system-wide exemption for your particular setup.

  • SFTP and FTP connections are reused when possible for better performance
  • When stopping publishing, the currently uploading file is allowed to finish first. Clicking the Stop button for a second time forces the upload to stop immediately
  • Avoids the quirk where the publishing process of folders could appear to jump backwards and forwards for some time
  • Fixes a crash when SFTP authentication takes too long
  • Addresses an issue where the publish or export progress window would unnecessarily include an entry for the overall upload folder
  • The dock progress indicator for publishing is working again
  • Revamped sheet for browsing remote folders during host setup

Browser Compatibility

  • Allows IE 9 and above to play video and MP3 audio natively, not using Flash
  • Fix to video/audio flash detection script
  • Adds a margin below popup menus so that sub-menus taller than the content will not be cut off on Webkit browsers
  • Improves compatibility of favicon images with Google Chrome

Distribution & Licensing

  • Sandvox is now distributed as a .zip archive, not a disk image (.dmg). Consequently, the software license agreement is shown on first launch (instead of as part of mounting the disk image)
  • If launched from outside of the Applications folder, Sandvox offers to move itself to a more appropriate location
  • Fixes a crash in the licensing window

Document Handling

  • Improves reliability of importing corrupted old Sandvox documents
  • Corrects a bug where photo albums wouldn’t display titles after import


  • Smart-quote substitution is disabled in the Raw HTML editing and Code Injection windows

Other Changes

  • Localization updates
  • Improves reliability of re-opening Inspector windows at launch on OS X 10.7 and later
  • + and : characters are now disallowed in page file names
  • Design fixes
  • Resolves an issue where creating a link in an empty paragraph, and where there were following paragraphs, would result in the link’s text being empty
  • Restores “Paste Link” functionality
  • Improves compatibility with current developer release of OS X 10.10 “Yosemite”

Theme Designers

  • Extra style sheets can be bundled as part of a design, when referenced as an import with a relative path

Learn more about Sandvox