The <iframe> tag is used to embed another HTML document within the current page. It can specify the source of the embedded content using the src attribute or embed content directly using the srcdoc attribute. The sandbox attribute enables security restrictions for the embedded content by default but allows whitelisting specific features like forms, scripts, or navigation.