How to use Sandboxie Plus to isolate applications on Windows

If you use Windows and often tinker with unfamiliar programs, suspicious links, or outdated browsers, sooner or later you'll wonder how to avoid putting your entire system at risk. That's where Sandboxie Plus comes in, software that creates a isolated environment to run applications securely without touching your main Windows installation.

In the following lines you will see in detail What is Sandboxie Plus, how does it work, and how to use it step by step? to run and even install programs within a virtual "sandbox." The idea is that you can test, browse, or open suspicious files with much greater peace of mind, taking full advantage of this veteran project that is now free software.

What is Sandboxie Plus and what is it used for?

The concept of a sandbox, usually translated as isolated environment or process isolationSandboxes are increasingly used as an additional layer of security in modern operating systems. Essentially, a sandbox separates program execution from the real system to prevent, or at least mitigate, software bugs, vulnerabilities, and malicious behavior.

In the case of Sandboxie Plus, we are talking about a program exclusive to Windows that creates a virtual operating environment where applications run without permanently modifying the systemEverything the program does remains "locked" in that isolated box: created files, configuration changes, browser history, etc.

This type of isolation is especially useful when you want to run unreliable applications, downloaded from dubious or very old sources that could damage the system or your documents. The sandbox limits access to key resources: storage, network, reading input devices, the ability to inspect the host system… all controlled by Sandboxie Plus and, to some extent, by the user.

A very intuitive example of a sandbox is virtual machines, which emulate a complete computer where you install a guest operating system, or similar tools in Linux such as Using Firejail on LinuxThat guest system runs in a separate space and only accesses the host through the hypervisor. However, A virtual machine weighs considerably more and is more complex to manage a solution like Sandboxie Plus, which focuses on isolating specific applications within Windows itself.

Modern browsers, such as Chrome or Chromium, also integrate their own sandboxing mechanisms, isolating tabs and processes to improve security; for example, you can Manage containers in Firefox to isolate sites. Sandboxie Plus goes a step further and lets you Create custom isolation boxes for virtually any desktop program, without being limited to just the browser.

History of Sandboxie and differences between Classic and Plus

Sandboxie was born in 2004 with a very specific goal: Isolate Internet Explorer in WindowsIt was a browser with a rather poor security reputation, even in its heyday. Over time, it expanded its support to other browsers and desktop programs in general, becoming a well-known tool among advanced users who valued security.

Over the years, the project has passed through several hands. It was first developed by its original author, Ronen Tzur, until the solution was acquired by Invincea. Later, in 2013, Sophos acquired Invincea and also kept SandboxieTzur withdrew from development and Sophos kept the product active for a while, but signs began to appear that the software would not have a very long future.

The end was already foreseeable in 2019, and in 2020 Sophos decided Discontinue Sandboxie as a commercial product and release the code under the GPLv3 license. From that moment on, Sandboxie became "hardline" free software, with open source code and the community able to contribute and fork.

After the release, development was taken over by David Xanatos, who currently leads the project and maintains two main branches: Sandboxie Classic and Sandboxie PlusBoth share the same component base and offer the same level of isolation and security, but differ mainly in the interface and the extra features of the Plus edition.

Sandboxie Classic retains an older, MFC-based interface that is very functional but somewhat spartan. Sandboxie Plus, on the other hand, incorporates a modern interface developed with Qt It includes all the new features that have been added since the code was open source. Many of these improvements can also be used in the Classic edition, although they usually require manually editing the Sandboxie.ini configuration file.

Key features of Sandboxie Plus

The Plus edition doesn't just give Sandboxie a modern makeover, it adds a good handful of very practical advanced features If you plan to use the program regularly. Among the most interesting features are the following:

On the one hand, it has a snapshot manager for each sandboxThis allows you to take a "snapshot" of the state of an isolation box at a specific moment and restore it later. It's ideal if you want to perform aggressive testing with a program, break things without fear, and then return to a clean state in a couple of clicks.

It also integrates a maintenance mode With this tool, you can install, uninstall, start, or stop both the Sandboxie driver and service as needed. This is useful for those who prefer to have the fewest components loaded in memory or want to alternate periods of intensive use with periods when Sandboxie is not active.

Another striking feature is the portable modInstead of a traditional installation, you can run the installer and extract all the files to a directory, carrying Sandboxie Plus in a folder. This simplifies its use on different computers without cluttering the system with repeated installations.

The Plus interface also incorporates additional access control optionsFor example, you can block access to the Windows clipboard, print spooler, or other sensitive system components directly from the interface. It also offers more control over internet access restrictions and which programs can be run from Start > Run within the sandbox.

For situations where something is behaving in a clearly suspicious way, Sandboxie Plus includes a global hotkey to terminate all processes in a sandbox at onceIt's a quick way to "pull the plug" virtually without having to close windows or processes one by one.

Finally, the Plus edition adds a A firewall specific to each sandbox, integrated with the Windows Filters Platform (WFP)This allows you to define different network rules for each isolation box, limiting or blocking internet access for applications running inside it in a very granular way.

Sandboxie Plus interface and basic usage

Once Sandboxie Plus is installed, the first thing you'll see when you open it is a main window fairly easy to understandAlthough it's not fully translated into Spanish, you need a basic understanding of technical English to navigate all the options smoothly, but you'll get the hang of it quickly with just a few clicks.

Just like in the Classic edition, Sandboxie is controlled via a control application that adds a yellow icon in the notification area (system tray) of the taskbarIf Sandboxie Control is not open, you can launch it from the Sandboxie program group in the Windows Start menu.

When it's active, you can Show or hide the main window by double-clicking on the icon. from the tray. If you prefer the context menu, right-clicking the icon will give you the option to toggle between "Hide Window" and "Show Window", as well as other quick actions.

By default, Sandboxie Plus comes with a preconfigured isolation box called “DefaultBox”It uses a default restrictions template designed for general use. If you right-click on “DefaultBox” and choose “Sandbox Options” (or “Sandbox Options”, depending on the language), you can adjust its behavior to your liking.

You also have a very interesting option available to get started on the right foot: viewing the official help from an isolated browser. From the Sandboxie Control help menu, you can launch the “Getting Started Tutorial (Web)” within a sandboxed browserso that even while you are reading the documentation, you are already doing so in a protected environment.

First steps: Install Sandboxie Plus and create your first sandbox

The Sandboxie Plus installation process is fairly standard. First, you need to Download the installer from the project's official websiteThe page has a simple design, without too many frills, but you get straight to the point: Downloads section and download of the .exe file corresponding to your version of Windows, whether 32 or 64 bits.

Once the installer is downloaded, simply run it and follow the typical Windows wizard of "Next, Next, OK". It's very straightforward: You accept the license, choose the installation path, and let the wizard finish.If you want to use portable mode, instead of a full installation you can specify that it extracts the files to a folder.

When you start Sandboxie Plus for the first time, it will display its main window with the pre-set "DefaultBox". You'll see that the interface isn't entirely in Spanish, but the The sandbox tree and top menu are easy to interpretFrom that moment on, you can start running applications in isolation.

For many users, the default toolbox is sufficient, but the most interesting thing about the program is create your own custom isolation environmentsThis way you can have, for example, a more relaxed sandbox for testing relatively reliable software and another "shielded" one for clearly suspicious things.

To create a new sandbox, go to Go to the “Sandbox” menu and select “Create New Sandbox”The program will ask you for a name for the new sandbox (for example, “Browser Sandbox” or “MC Tests”) and will offer several initial configurations. One of the common options is to choose a “Hardened” profile for increased protection from the start.

After pressing Accept, you will have your new box configured with fairly strict securityIt's ready to run applications in a more controlled way. You can always adjust its options later, but as a starting point, it's a convenient way to begin "in safe mode."

How to run programs inside a sandbox

The most straightforward way to use Sandboxie Plus is running an application inside a specific isolation boxThis ensures that all temporary files, registry changes, and other modifications you make remain within that sandbox.

A classic method involves right-clicking on the name of the sandbox you want to use (for example, the one you just created) and hovering the cursor over the "Run" option. From there, you can select “Run Program” (“Run a program”)which will open a window to indicate which application you want to launch.

In that window you can directly type the full path to the executable, but for most users it is more convenient to press the “Browse…” button and navigate through the file system until you find the .exe file. that you want to run. Once selected, press “OK” and the program will start inside the chosen sandbox, without touching the real system.

Another alternative is to use the "Run from Start Menu" option. Selecting it from the "Run" menu of the corresponding sandbox displays a kind of Windows Start menu accessible from Sandboxie PlusThere you can locate the application installed on your system and launch it directly inside the isolation box.

For example, you can launch browsers like Brave or even Internet Explorer from this menu. In the case of the veteran IE, which has always had a terrible reputation for security (it was even nicknamed "Internet Exploiter"), Running it in a sandbox is almost mandatory if you still need to use it for procedures or old websites.

If there's a program you always use within the same sandbox, you'll want to create a specific shortcut for it. From the context menu of the running application (within Sandboxie Control), you can select “Create Shortcut” (“Create Shortcut”)The wizard will allow you to choose where to place the shortcut and what name to give it, so that when you open it, the application will automatically launch in the sandbox without you having to manually open Sandboxie Plus first.

Install full applications within Sandboxie Plus

In addition to running already installed programs, Sandboxie Plus lets you install applications directly inside an isolation boxThis is very useful for testing new software without leaving a trace on the system and seeing how it behaves before deciding whether to install it "for real".

The procedure is very similar to running any program, but instead of choosing the main executable of the application, you select the .exe installerFor example, you could download the Google Chrome installer and, from the "Run" menu of your sandbox, launch that installer inside the box.

During installation, you may find access denial messages or permission warningsThis is because the sandbox is restricting certain changes the installer attempts to make to the system. In many cases, simply closing these informational windows and letting the process continue is sufficient.

Google Chrome, for example, offers installation mode without administrator privilegesIf you choose this option, the browser will be installed entirely within the sandbox, without needing to touch the registry or system folders outside the isolated environment. Once the process is complete, Chrome will open normally, but everything it does will be confined to that sandbox.

Keep in mind that applications installed this way They will not appear in the operating system's Start menu. just like a normal installation. To run them, you'll have to use the sandbox menu where you installed them again (for example, "Run > Run Program" or "Run > Run from Start Menu" within Sandboxie Plus), or create specific shortcuts from the Sandboxie interface itself.

Configuration options and compatibility templates

One of Sandboxie Plus's greatest strengths is the amount of configuration options available for each sandboxFrom the properties of a specific box, you can fine-tune with considerable precision which system resources each program running within it can see and which ones it is prohibited from accessing.

Among other things, you can define which disk folders are accessible, whether or not network access is allowed, which external processes can be started, how files that the application tries to write outside the sandbox are handled, and so on. Obviously, The default configuration already offers a reasonable level of protectionespecially if you've used a hardened profile, but having this margin of error is invaluable for advanced users.

One particularly useful section is the “application templates”These templates automatically adjust certain rules to improve the compatibility of specific programs with the sandbox environment. For example, some browsers, office suites, or messaging clients have peculiarities that, with the standard configuration, could cause problems. By activating the corresponding template, Sandboxie applies the necessary changes to make everything run more smoothly.

After restarting your system for the first time after installing Sandboxie Plus, you may see a window where the program asks you if Do you want to grant it access to certain Windows components or applications?The aim of these requests is precisely to improve compatibility and allow it to work with certain parts of the system that would otherwise be too closed.

Although it might seem overwhelming at first, it's worth taking some time to explore the different options sections of each sandbox. This way you can define very closed boxes for dangerous tests and other more permissive ones for everyday use, always maintaining a clear boundary between trusted software and software that is not so trusted.

Why use Sandboxie Plus on a modern Windows system?

Today, Windows increasingly incorporates more layers of security by default: application control, memory protection, process isolation, Windows Defender, and even its own Windows Sandbox feature available in the Pro and Enterprise editionsThis might suggest that solutions like Sandboxie Plus are no longer necessary.

However, Sandboxie Plus still makes a lot of sense, especially for those who use Windows editions that do not include Windows Sandbox or it requires more detailed application-level control. Having been in operation for years and being highly polished, it has earned a niche as a lightweight, flexible, and highly configurable tool.

Furthermore, not all the danger lies in the "weird software" you download. There are Older but still necessary applications, such as Internet Explorer, continue to be a headacheAlthough Microsoft has practically declared it dead, there are companies and public administrations that still require its use for certain procedures. Running it within a sandbox is a good way to minimize risks.

For any user who deals daily with suspicious attachments, obscure programs, cracks, or experimental tools, Having an isolated environment ready for testing is almost mandatory.Sandboxie Plus offers a very interesting balance between ease of use, power and resource consumption, without reaching the complexity of a full virtual machine.

Overall, Sandboxie Plus remains one of the More practical isolation solutions for home and advanced Windows usersIts status as free software, the existence of two editions (Classic and Plus) and the active maintenance by the community and its current developer reinforce its position against integrated or commercial alternatives, especially when seeking fine control of what each program can or cannot do.

Everything we've seen makes it clear that Sandboxie Plus is a very mature tool for Protect your Windows system from untrustworthy applications Without complicating things with heavy virtual machines or giving up the convenience of continuing to use your usual programs; creating sandboxes, adjusting them to your liking and running or installing what you need inside them is as simple as following a few well-chosen steps, knowing that, whatever happens inside that box, your real system will remain safe.