"Open sandbox" now requires a verified email on production, and the sandbox binds your sandbox account to your production account rather than to the email address alone. A sandbox account that uses two-factor authentication, or belongs to an operator, is never entered through the handoff; sign in to the sandbox directly. Changing your production email now asks for your current password.
This note records shipped behavior as of . Planned work remains on the public roadmap until release.