Why is the preview blank for some sites?

Many sites (Google, Facebook, banks) block being embedded via X-Frame-Options or Content-Security-Policy headers. The iframe code still works on sites that allow it; the live preview just can't render those sites here.

When should I use sandbox?

When embedding untrusted content (user-uploaded HTML, third-party widgets you don't control). Sandbox blocks scripts, popups, form submission, etc., by default; allow only what you actually need.

Developer Utilities · Free tool

Iframe Generator

Build clean iframe tags with sandbox, lazy-load, and accessibility attributes while previewing live. A free, instant online generator requiring no download or signup.

Updated June 2026

URL to embed

WidthHeightTitle (a11y)

loading="lazy" (defer until in viewport)Allow fullscreenSandbox (security: blocks scripts unless allowed)

Generated code

<iframe src="https://example.com" width="100%" height="400" loading="lazy" referrerpolicy="no-referrer-when-downgrade" allowfullscreen title="Embedded content"></iframe>

Live preview

Some sites block embedding via X-Frame-Options or Content-Security-Policy. If preview is blank, that's why — the iframe code still works on sites that allow it.

Found this useful?Email Buy Me a Coffee

What it does

Generate a clean <iframe> tag for embedding any URL — with the security attributes most embed builders forget: loading="lazy" for performance, sandbox flags for untrusted content, accessible title for screen readers. Includes a live preview so you know it’ll render before you paste.

Embed this tool on your siteShow snippet

Paste this snippet into any page. Loads on-demand (lazy), no tracking scripts, and sized to most dashboards. Replace the height to fit your layout.

<iframe src="https://freetoolarena.com/embed/iframe-generator" width="100%" height="720" frameborder="0" loading="lazy" title="Iframe Generator" style="border:1px solid #e2e8f0;border-radius:12px;max-width:720px;"></iframe>

Embed docs →

How to use it

Paste the URL you want to embed.
Set width and height (px or %).
Pick options: lazy-load, fullscreen permission, sandbox.
Copy the generated tag into your HTML.

Frequently asked questions

Why is the preview blank for some sites?: Many sites (Google, Facebook, banks) block being embedded via X-Frame-Options or Content-Security-Policy headers. The iframe code still works on sites that allow it; the live preview just can't render those sites here.
When should I use sandbox?: When embedding untrusted content (user-uploaded HTML, third-party widgets you don't control). Sandbox blocks scripts, popups, form submission, etc., by default; allow only what you actually need.

Learn more

Explore more developer utilities tools

100% in-browserNo downloadsNo sign-upMalware-freeHow we keep this safe →