Install and run apps in a virtual sandbox environment

Sandboxie Plus

Sandboxie Plus

  -  23.3 MB  -  Open Source
  • Latest Version

    Sandboxie Plus 1.17.3 (64-bit) LATEST

  • Review by

    Daniel Leblanc

  • Operating System

    Windows 7 64 / Windows 8 64 / Windows 10 64 / Windows 11

  • User Rating

    Click to vote
  • Author / Product

    David Xanatos / External Link

  • Filename

    Sandboxie-Plus-x64-v1.17.3.exe

Sandboxie Plus is a powerful security and virtualization software that allows Windows users to run applications in a controlled and isolated environment, commonly referred to as a "sandbox."

This prevents unwanted system modifications, malware infections, and registry changes.

Originally developed by Sophos, the open-source Sandboxie Plus community has taken over its development, improving features and compatibility with modern operating systems.

Main Features

Application Isolation: Runs applications in a virtualized space, preventing them from affecting the host system.

Secure Web Browsing: Ensures that browser sessions remain separate from the main system, blocking malware and unwanted downloads.

File and Registry Virtualization: Prevents programs from modifying system files and registry entries unless explicitly permitted.

Customizable Sandbox Configuration: Users can fine-tune sandbox settings for better performance and security.

Portability: Allows users to run applications in a sandbox without permanently installing software on their machines.

Support for Multiple Sandboxes: Run different applications in separate sandboxes simultaneously.

Open-Source Development: Frequent updates and community-driven enhancements.

User Interface

The app features a modernized and more user-friendly interface compared to the original Sandboxie Classic. The new GUI provides a more intuitive way to manage and configure sandboxes.

It includes a toolbar, a settings menu, and real-time monitoring of sandboxed applications. Advanced users can access additional settings to tweak security rules and permissions.

Installation and Setup
  • Download the Installer from the official website, FileHorse.com or GitHub repository.
  • Run the Installer and follow the on-screen prompts.
  • Configure Initial Settings based on your use case (default settings work for most users).
  • Create Sandboxes for specific applications (e.g., web browsers, email clients, testing software).
  • Launch Applications in the Sandbox through the Sandboxie Plus interface.
How to Use
  • Open Sandboxie Plus.
  • Create a new sandbox by selecting “Create New Sandbox” from the menu.
  • Configure sandbox settings (such as file access permissions and internet connectivity).
  • Right-click on an application and choose “Run Sandboxed.”
  • Use the application as normal while it remains isolated from your main system.
  • When done, clear the sandbox to remove any temporary changes or malware threats.
FAQ

Is Sandboxie Plus 64bit free?
Yes, the basic version is free, but there is a premium version with additional features such as forced programs and enhanced security options.

Can I run multiple applications in the same sandbox?
Yes, multiple applications can run within the same sandbox, but for better isolation, separate sandboxes are recommended.

Does Sandboxie Plus slow down my system?
Minimal impact on performance, but resource usage depends on the number of running sandboxes and applications.

Is it compatible with Windows 11?
Yes, the latest versions support Windows 11, as well as older versions of Windows.

Can I use Sandboxie Plus to test software safely?
Yes, it is an excellent tool for running untrusted software without risking system stability.

Pricing

Free Version: Includes basic sandboxing features.

Premium Version: Available with advanced features such as automatic program sandboxing, enhanced security, and improved UI. The cost varies depending on licensing terms and user needs.

System Requirements
  • OS: Windows 7, 8, 10, and 11 (both 32-bit and 64-bit)
  • Processor: 1 GHz or higher
  • RAM: Minimum 2 GB (4 GB recommended)
  • Storage: 50 MB free disk space
  • Additional: Administrator privileges required for installation and usage
PROS
  • Lightweight and efficient sandboxing solution
  • Protects against malware and unwanted changes
  • Allows safe software testing and browsing
  • Free and open-source with an active development community
  • Customizable settings for advanced users
CONS
  • Some applications may not work properly in a sandbox
  • Initial learning curve for new users
  • Premium features locked behind a paywall
  • Occasional compatibility issues with Windows updates
Conclusion

Sandboxie Plus is an excellent tool for Windows users looking to enhance security and privacy through application sandboxing. It is especially useful for testing software, browsing securely, and preventing unwanted system changes. With its modernized user interface and open-source development, it continues to be a viable alternative to traditional security solutions.

While some applications may not function properly within a sandbox, and premium features require a subscription, the free version still provides significant value.

Why is this app published on FileHorse? (More info)

What's new in this version:

Added:
- added configurable window location settings to control which monitor main, non-main, file recovery, and notification windows open on, including a selectable fallback mode.
- Global Settings > Interface Config > Window Options
- added "Label only" border mode option (onlbl, ttllbl, alllbl) that hides the colored border frame and shows only the sandbox name (or alias) label
- added MIDI workaround template for Windows 11
- added new tray customization options (Global Settings > Shell Integration > System Tray):
- "Show icons in tray context menu" (Options/TrayIcons) — controls whether custom sandbox icons are displayed in the tray menu.
- "Show box alias name instead of box name in tray" (Options/TrayUseAlias) — displays the configured alias/display name in both compact and regular tray menus.
- "Show sandbox status as tooltip in tray list" (Options/TrayStatusTip) now supports tri-state behavior: unchecked = never, partial = while Ctrl or Shift is held (default), checked = always.
- "Show overlay icons for boxes in tray list" (Options/TrayOverlayIcons) — shows the same box-state overlays used in the main sandbox list (no-force, disk image mounted/unmounted, RAM disk, auto-delete) on tray icons in both the compact widget and the regular context menu.
- added border capture exclusion via HideBordersFromCapture
- keeps border frames and labels out of screenshots and screen recordings; defaults to CoverBoxedWindows
- added border label width and taskbar clipping options
- configurable via BorderColor label width and BorderExcludeTaskbar
- added UseFakeShellDispatch option to provide synthetic IShellDispatch fallback (may fix some WebView2 issues)
- can be disabled per process via UseFakeShellDispatch=process,n
- added Template_OnScreenKeyboard (Windows 11) to fix On-Screen Keyboard freezes when used with sandboxed programs

Changed:
- reduced constant GUI CPU usage by caching custom BoxIcon resolution in the sandbox model instead of reloading icon resources on refresh
- throttled internet connectivity check in SandMan main timer to once every 60 seconds and cache the result
- updater only runs when device has internet connectivity, eliminating wasted network attempts and reducing repeated HKLM\\SYSTEM\\Setup\\SystemSetupInProgress registry checks
- changed duplicate sandbox behavior so active box aliases also receive the "Copy" suffix on duplication
- changed tray sandbox/group ordering to mirror sandbox list mode (manual / ascending / descending), including group ordering
- improved tray/sandbox submenu icon caching by resolving DblClickAction target paths (GetCommandFile) only on cache misses and caching LoadWindowsIcon(path,index) results for Run/Start menu entries, reducing repeated system icon extraction when opening menus
- improved border rendering

Fixed:
- fixed false "Some changes haven't been saved yet" prompt when leaving Network Options with unlisted-process network mode set to non-default
- fixed duplicated boxes not preserving the original box group assignment
- fixed double-clicking on a group's empty path/command line crash
- fixed compact tray box list clipping long sandbox names; width is now measured precisely per item using font metrics and scales correctly at any DPI
- fixed WOW64 registry view inheritance for relative key opens in SbieDll, preserving parent KEY_WOW64_32KEY/KEY_WOW64_64KEY semantics across NtOpenKey/NtCreateKey
- fixed handle leak in ScanStartMenu: IShellLinkW and IPersistFile COM interfaces were never released in ResolveShortcut, permanently retaining handles (file, registry, icon) for every .lnk shortcut scanned; replaced raw pointers with CComPtr to ensure Release() on all exit paths
- fixed parsing logic for ClosedClsid and ClosedRT settings
- FIXED SECURITY ISSUE ID-32: EditPassword Hash Entropy Loss, new passwords will ne salted SHA256 and base64 encoded
- Note: the fix only takes effect when the password is being set, existing passwords remain weak
- fixed Local Denial of Service (DoS) Vulnerability Exploitable by Sandboxed Process 
- fixed Sandboxie-Plus EditAdminOnly Bypass via INI CRLF Injection
- fixed issues with GetRawInputDeviceInfoSlave
- fixed an issue with RunSbieCtrl
- fixed name validation in ProcessServer handlers
- fixed parameter validation in NamedPipeServer
- fixed file integrity issues with updater