.webp)
Sandboxie Plus main interface showing the available sandboxes and their current status.
If you regularly download software from the internet, experiment with unfamiliar applications, or occasionally visit websites that you do not completely trust, Sandboxie Plus is a security tool worth considering.
Unlike a conventional antivirus, Sandboxie Plus does not primarily try to detect malware. Instead, it allows applications to run inside an isolated environment where their changes can be contained and discarded. This makes it useful for software testing, disposable web browsing, and adding another layer of protection to Windows.
Sandboxie Plus is also open source and is actively developed. It is available for 64-bit Windows and has both a modern Plus interface and the older Classic interface. The Plus version is where new features are primarily implemented.
What Is Sandboxie Plus?
Sandboxie Plus creates isolated environments called sandboxes. Applications running inside a sandbox operate normally, but changes they make to files, folders, the Windows Registry and other resources are redirected into the sandbox instead of being permanently applied to the normal Windows environment.
When you no longer need the sandbox, its contents can be deleted. In simple terms, you can run a program, use it normally, and then throw away the environment containing the changes it made.
This is the fundamental idea behind Sandboxie: contain the application rather than relying entirely on detecting whether the application is malicious.
Sandboxie Is Not an Antivirus
It is important to understand the difference.
An antivirus such as Microsoft Defender attempts to detect and block malware. Sandboxie takes a different approach by limiting the impact an application can have on the host system.
For example, if you download an unfamiliar utility, Defender may determine whether the file is malicious. Running the same utility inside Sandboxie gives you an additional layer of containment, allowing its changes to Windows to remain inside the sandbox.
Standard Isolation Sandbox
Creating a sandbox does not require complicated configuration. Sandboxie Plus provides presets, including the Standard Isolation Sandbox, which is a sensible starting point for general use.
.webp)
The Standard Isolation Sandbox preset provides a straightforward starting point for everyday sandboxing.
Once a sandbox has been created, applications can be launched inside it from the Sandboxie interface, Windows Explorer or other integrated shortcuts.
More experienced users can create multiple sandboxes with different rules and permissions. This allows, for example, a separate sandbox for browsing, another for testing software, and another with restricted network access.
Disposable Web Browsing
One of Sandboxie's most useful applications is disposable web browsing.
You can keep your normal browser completely untouched and launch another browser inside a sandbox when visiting unfamiliar websites. Browser cache, cookies, temporary files and other changes can remain inside the sandbox instead of becoming part of your normal browser profile.
For example:
| Situation | What to do |
|---|---|
| Normal websites | Use your regular browser normally. |
| Random or unfamiliar websites | Launch Firefox or another browser inside a sandbox. |
| Finished | Close the browser and discard the sandbox. |
This provides a convenient disposable browsing environment without requiring a full virtual machine.
Sandboxie also has dedicated support and configuration options for Firefox and other browsers.
Automatic Deletion and Snapshots
Sandboxie Plus can automatically delete the contents of a sandbox when the last sandboxed process terminates. This is particularly useful for temporary browser sessions.
.webp)
Sandboxie Plus can automatically delete sandbox contents and can also use snapshots to restore a known state.
In the configuration shown above, Auto delete content changes when last sandboxed process terminates is enabled. This makes the sandbox effectively disposable.
Sandboxie Plus also supports box snapshots. A snapshot allows you to save a sandbox state and later revert to it. This can be useful when testing software repeatedly and wanting to return to a known clean configuration.
Snapshots are available in the free version, while some other advanced sandbox features require a Supporter Certificate.
Security Hardening
Sandboxie Plus goes beyond basic file and Registry isolation. It provides additional security-hardening options for users who want tighter restrictions.
.webp)
Security hardening options include restrictions on system calls, device access and application elevation.
The security options include controls for security-enhanced sandboxes, driver and device access, administrator rights, MSI installers and file access.
Some of the more advanced security-enhanced sandbox functionality requires a Supporter Certificate. For ordinary browsing and software testing, however, the standard isolation sandbox is usually a better starting point than immediately enabling every available restriction.
Some applications may require access to resources that a more restrictive sandbox blocks. Start with the standard configuration and add restrictions according to the use case.
Network Control
Sandboxie Plus can also control network access on a per-sandbox basis.
.webp)
Network access can be allowed or blocked for processes running inside the sandbox.
The network firewall options can be used to allow or deny internet access for applications running in a sandbox. This is particularly useful when testing software that should not be allowed to communicate with the internet.
Sandboxie Plus also supports Windows Filtering Platform (WFP) integration. WFP support is available in the free version.
Windows Shell and Run Menu Integration
Sandboxie Plus does not require you to open the main program every time you want to sandbox something. It can integrate with the Windows shell and provide sandboxed-launch options through its run menu and Explorer context menu.
.webp)
Sandboxie Plus can integrate sandboxed execution into the Windows shell and Run Menu.
This is particularly useful for everyday use. Instead of manually navigating through Sandboxie Plus, you can right-click an executable or other supported item and choose to run it inside a sandbox.
The Plus interface also provides per-box run menus, Start Menu integration and options for forcing selected applications into a particular sandbox.
Application Control
Sandboxie Plus provides extensive control over which programs run inside a sandbox.
Applications can be configured to be forced into a particular sandbox, while selected applications can be allowed to run outside the sandbox when necessary.
This makes it possible to build a more automated setup. For example, you could configure a particular browser to always run inside a dedicated browser sandbox while leaving your normal browser untouched.
There are also breakout rules that can allow selected applications launched from within a sandbox to run outside it when required.
File Recovery
Sandboxing everything can sometimes create a small problem: what if you actually want to keep something created by a sandboxed application?
Sandboxie Plus provides file recovery for this situation. You can recover selected files from the sandbox before deleting the rest of its contents.
This is particularly useful for downloads. You can download a file inside a sandbox, examine it, recover it if you decide to keep it, and then discard the remainder of the sandbox.
Download inside the sandbox → examine the file → recover it if you decide to keep it → discard the rest of the sandbox.
Multiple Sandboxes
You are not limited to a single sandbox.
Different sandboxes can be configured for different purposes, for example:
| Sandbox | Purpose |
|---|---|
| Browser Sandbox | Disposable web browsing. |
| Software Testing | Testing unfamiliar applications. |
| Offline Testing | Applications that should not have internet access. |
| Restricted Sandbox | Applications that should have limited access to files and system resources. |
Sandboxie Plus also provides sandbox-specific security identifiers, helping separate processes running in different sandboxes.
Privacy-Enhanced Sandboxes
For users who want stronger isolation from personal information, Sandboxie Plus provides Privacy Enhanced Sandboxes.
These apply predefined restrictions intended to protect locations that may contain personal data. This can be useful when running software that you do not want accessing your normal documents and other private information.
Privacy Enhanced Sandboxes are a supporter feature and are not included in the basic free configuration.
Fake Administrator Privileges
Sandboxie Plus can also make applications inside a sandbox behave as though they have administrator privileges without necessarily granting those applications unrestricted administrator access to the host system.
This can improve compatibility with installers and older applications that incorrectly assume they are running with administrative privileges.
Other Advanced Features
Sandboxie Plus includes a surprisingly broad collection of additional features. Depending on the edition and configuration, these include:
| Feature | Feature |
|---|---|
| Box snapshots | WFP-based network control |
| Security Enhanced Sandboxes | Privacy Enhanced Sandboxes |
| App Compartment Boxes | USB drive sandboxing |
| RAM-disk integration | Sandbox encryption |
| DNS filtering | Proxy injection |
| Sandbox-specific SIDs | Process breakout and forced-process rules |
| Event triggers and scripts | Fake administrator privileges |
| Box size monitoring |
Not all of these features are included in the free version. The official feature comparison provides the current breakdown between the free and supporter versions.
View the official Sandboxie Plus feature comparison
Free Version vs. Supporter Features
The free version is capable enough for many home users.
Importantly, the free version includes core features such as box snapshots and WFP support. However, features such as Privacy Enhanced Sandboxes, Security Enhanced Sandboxes and App Compartment Boxes require a Supporter Certificate. Sandbox encryption, proxy injection and DNS filtering also have additional licensing requirements.
If your main purpose is testing unfamiliar software and occasionally running a disposable browser, the free version provides the core functionality needed for those tasks.
Sandboxie Plus vs. a Virtual Machine
Sandboxie Plus should not be confused with a virtual machine.
| Sandboxie Plus | Virtual Machine |
|---|---|
| Runs applications within the existing Windows installation. | Runs another operating system inside a separate virtualized environment. |
| Convenient and relatively lightweight for application isolation. | Provides a more independent operating-system environment but requires more resources and setup. |
The advantage is convenience and relatively low overhead. You can start a sandboxed application almost like a normal application instead of booting an entire virtual machine.
The disadvantage is that Sandboxie is not an independent operating-system boundary. For highly hostile malware analysis, a properly isolated virtual machine or dedicated test machine remains more appropriate.
Who Should Use Sandboxie Plus?
Sandboxie Plus is particularly useful for users who:
- Download and test Windows utilities regularly.
- Experiment with unfamiliar software.
- Visit potentially risky or unfamiliar websites.
- Want disposable browser sessions.
- Need to keep certain applications away from personal files.
- Want more control over application network access.
- Enjoy experimenting with advanced Windows security configurations.
It is less important for someone who rarely installs software and only visits well-known websites. For those users, a properly updated Windows installation with Microsoft Defender and sensible browser and DNS protection may already provide sufficient protection.
What I Like
- Provides application containment rather than simply malware detection.
- Excellent for disposable web browsing.
- Very useful for testing unfamiliar software.
- Automatic sandbox deletion is extremely convenient.
- Snapshots make it easy to return to a known clean state.
- Per-sandbox network control is powerful.
- Extensive application and file access controls.
- File recovery allows selected files to be kept before deleting a sandbox.
- Multiple sandboxes can be configured for different purposes.
- Strong customization options for experienced users.
- Open-source project with active development.
- The free version provides the core sandboxing functionality.
What I Don't Like
- The number of options can be intimidating for beginners.
- Some advanced security and privacy features require a Supporter Certificate.
- Some applications may require additional configuration to work correctly.
- Overly restrictive configurations can cause compatibility problems.
- It is not equivalent to a virtual machine and should not be treated as an absolute security boundary.
Sandboxie Plus is powerful, but that power comes with a learning curve. The default configuration is approachable, while the deeper security and privacy controls are better suited to users who understand what each restriction is intended to accomplish.
✓ Pros
- Powerful application containment
- Excellent disposable browsing
- Very useful for testing unfamiliar software
- Automatic sandbox deletion
- Snapshots and file recovery
- Per-sandbox network control
- Extensive customization options
- Multiple sandboxes for different purposes
- Open source and actively developed
- Strong core functionality in the free version
× Cons
- Large number of options can intimidate beginners
- Some advanced security and privacy features require a Supporter Certificate
- Some applications require additional configuration
- Overly restrictive rules can cause compatibility problems
- Not equivalent to a virtual machine
Bottom Line
Sandboxie Plus is one of those Windows utilities that can be far more useful than its basic concept initially suggests.
It is not another antivirus and does not need to compete with Microsoft Defender. Its real strength is containment. You can give an application a temporary environment, let it do what it needs to do, and then discard the environment along with the changes it made.
For beginners, simply creating a standard sandbox and using it for unfamiliar applications or disposable web browsing is enough to get significant value from the software.
For advanced users, features such as snapshots, WFP-based network control, application restrictions, privacy and security-enhanced sandboxes, recovery rules and detailed resource controls make Sandboxie Plus considerably more capable than its simple concept initially suggests.
If you frequently experiment with Windows software or want a separate browser for occasionally visiting random websites, Sandboxie Plus is well worth trying.
Official resources: Sandboxie Plus · Downloads · Features · Feature Comparison · GitHub · Documentation
Note: Sandboxie Plus is an isolation and containment tool. It should be used alongside an up-to-date operating system, browser and security software rather than as a replacement for them.