Sandboxie Free Download and What the No-Cost Tier Includes

Sandboxie has an unusual commercial history for a piece of security software. It began life as shareware, passed through the hands of two companies, was given away as freeware, and was finally released as open source before an independent developer took it forward. Anyone searching for a Sandboxie free download today is therefore stepping into a landscape that has changed several times, and it is worth understanding precisely what costs nothing, what requires a supporter certificate, and where the line falls between personal and commercial use. This article sets out those boundaries plainly, so that you can decide whether the free tier is enough for you or whether a certificate would genuinely earn its keep.

From Shareware to Open Source

The program was written by Ronen Tzur and first released in June 2004, originally as a way of isolating Internet Explorer. Over the following years its scope widened to other browsers and then to almost any Windows program. Throughout that early period it was sold as shareware: the free version carried limitations, such as allowing only one sandbox at a time, and nag screens appeared once the trial had run its course. For many home users that compromise was tolerable, but it meant that the full product was always a purchase away.

Ownership then changed twice. Invincea announced its acquisition at the end of 2013, and Tzur left early in 2014. Sophos, in turn, announced that it was acquiring Invincea in February 2017, and Sandboxie came with it. For a while the future of the program looked uncertain, since it was no longer central to the business of either owner.

The 2019 freeware decision

In September 2019 Sophos made Sandboxie freeware with version 5.31.4 and announced that it intended to open the source code. This was the first moment at which the entire program could be used without payment, and it removed the old single-box restriction and the nag screens that had defined the shareware years.

The 2020 open-source release

On 8 April 2020 Sophos published the source code under the GPL 3.0 licence, as a source-only version 5.40, and stepped away from the project. The very next day David Xanatos forked it. He maintains it today on GitHub under the repository named sandboxie-plus/Sandboxie, and he produces two editions from the same core: Plus, which carries a modern interface and receives every new feature, and Classic, which keeps the legacy interface and receives security and compatibility fixes but no new features of its own.

That history explains why the word "free" can mean slightly different things depending on which edition you choose. Classic is licensed under GPL-3.0-or-later. Plus uses a custom, open-core licence: it is free for personal, non-commercial use, while certain features are reserved for holders of a supporter certificate.

What a Sandboxie Free Download Actually Contains

The download offered on this website is the GitHub archive of the project's master branch. It is source code, not an installer, and it is intended for people who want to read, audit or build the software themselves. Building it requires Visual Studio, Qt and related tooling, so it is not a quick route to a working installation for most users. Compiled installers are published on the project's GitHub releases page, where each release carries six assets and SHA-256 checksums against which you can verify what you have downloaded.

The installer files follow a predictable naming pattern, which makes it easy to pick the right one:

• Sandboxie-Plus-x64-v1.18.8.exe for the Plus edition on ordinary 64-bit Intel and AMD machines.
• Sandboxie-Plus-ARM64-v1.18.8.exe for the Plus edition on ARM64 hardware.
• Sandboxie-Classic-x64-v5.73.8.exe for the Classic edition, which is x64 only.

Those two version numbers refer to the same release: Plus 1.18.8 and Classic 5.73.8 were published together and share the same core. Download portals sometimes display only one of them, which leads people to believe that one edition is far behind the other when in fact they are twins. At the time of writing, 1.18.8 is the current stable release, while 1.19.0 (paired with Classic 5.74.0) is a pre-release containing broad hardening work; the project asks users who try it to fall back to 1.18.8 if they encounter regressions.

The Free Tier in Detail

Once a Sandboxie free download has been installed from the releases page, the free tier of Plus is not a crippled demonstration. It provides genuine, everyday isolation, and for a great many users it is all they will ever need. According to the project's own feature comparison, a personal user without a certificate receives the following.

Standard Isolation boxes

The default box type, Standard Isolation, is free. Programs run inside it with a heavily restricted token, and their changes to files and the registry are redirected into the sandbox rather than written to the real system. You can create several boxes, run programs in them simultaneously, and empty them when you are finished. The default box is named DefaultBox, and new boxes can be added from the SandMan interface.

Snapshots

Box snapshots are included at no cost. A snapshot preserves the state of a box at a given moment, allowing you to return to it later. This is particularly useful when you have configured a sandboxed application carefully and wish to experiment without losing that setup.

Network rules through the Windows Filtering Platform

Support for network rules built on the Windows Filtering Platform is part of the free tier. This allows you to restrict what sandboxed programs may reach on the network, which is valuable when you are testing software whose behaviour you do not yet trust.

The Windows 11 context menu

Integration with the modern Windows 11 context menu is also free, so the option to run a program sandboxed appears where Windows 11 users expect to find it, rather than only in the extended legacy menu.

ARM64 as a trial

ARM64 builds of Plus have existed since version 1.5.0 in October 2022. On the free tier, ARM64 support is offered as a trial; continued use on ARM64 hardware is among the things a certificate provides.

The support reminder

Free users see a support reminder. It is a modest prompt asking you to consider supporting development, and it is the main visible difference between a free installation and a certified one for those who stick to standard features. It does not disable anything you are entitled to use.

What Supporter Certificates Add

A supporter certificate enables the specialised box types and several hardware-related features. These are worth describing carefully, because their value depends entirely on what you do with the program.

• Privacy Enhanced boxes. In a Standard box, sandboxed programs can still read most of your files. A Privacy Enhanced box prevents them from reading user data; they see empty folders instead.
• Security Hardened boxes. These combine dropping administrator rights, restricting devices, locking down system calls and applying rule specificity, creating a considerably tighter environment than the default.
• App Compartment boxes. These disable token-based security isolation while keeping file and registry virtualisation. They improve compatibility for awkward applications, but they are not a security boundary and should never be used for untrusted software.
• RAM disk boxes, which keep sandbox contents in memory.
• USB drive sandboxing, for isolating removable storage.
• Full ARM64 support, beyond the trial.
• Sandboxie-Live, which provides a year of support.

Privacy and security modes can be combined, and the interface marks such a box with a red icon so that it stands out from ordinary boxes.

The Advanced Feature Pack

Since version 1.11.0, a further layer has existed on top of the certificate. The Advanced Feature Pack covers sandbox encryption, proxy injection and DNS filtering. It is an addition to a certificate rather than a substitute for one. Contributor and Eternal certificates include it automatically; other types require it separately.

Certificate types compared

The project offers several kinds of certificate, and the differences lie chiefly in who may use them, how many devices they cover and how long they last. The table below summarises them using only the official descriptions.

The distinction between Home and Personal deserves a moment's attention. A Home certificate grants a year of use across your devices. A Personal certificate grants a year of updates, but builds released before it expires continue to work afterwards. If you are content to stay on a particular version for some time, the Personal model may suit you; if you want certified features on every machine you own, Home is the more natural fit.

Applying a certificate

Certificates are applied inside SandMan, the Plus interface. Open Options, then Global Settings, and go to the Support & Updates page. Paste the certificate or serial key there. Entering a serial key requires an internet connection so that the certificate can be fetched.

SandMan  >  Options  >  Global Settings  >  Support & Updates

The Business Certificate Rule for Commercial and Educational Use

This is the point most often misunderstood. The free tier of Plus is for personal, non-commercial use. Commercial use of Sandboxie Plus requires a Business certificate, and so does educational use. A school, university or training organisation deploying Plus on its machines therefore falls under the same rule as a company, even though education is sometimes assumed to enjoy an exemption. It does not.

Business certificates are issued per PC and last a year, so an organisation should count the machines on which Plus will be installed and plan renewals accordingly. The rule concerns the Plus edition and its licence. Classic is distributed under GPL-3.0-or-later, which carries its own terms, but it no longer receives new features and offers only the legacy interface, so it is rarely the right choice for an organisation that wants a maintained, modern tool.

When Paying Is Genuinely Worthwhile

It would be easy to treat certificates as an upsell, but the more honest view is that they serve particular needs. The question is whether you share those needs.

When the free tier is enough

• You want to try unfamiliar software in a disposable environment and empty the box afterwards.
• You run a browser in a sandbox so that downloads and session clutter do not persist on the real system.
• You value snapshots and network rules, both of which are already free.
• You are on an ordinary x64 machine and use the program for yourself alone.

When a certificate earns its keep

• You are concerned that a sandboxed program might read your documents. A Standard box allows reading most files; Privacy Enhanced mode closes that gap.
• You test software of doubtful origin and want the stricter Security Hardened configuration.
• You have an application that refuses to run in a Standard box and you trust it enough to place it in an App Compartment purely for compatibility.
• You use an ARM64 laptop and want to keep using Plus beyond the trial.
• You need encrypted boxes, proxy injection or DNS filtering, in which case the Advanced Feature Pack is also required.
• You use the program at work or in education, where a Business certificate is not optional.

There is also a reason that has nothing to do with features. Sandboxie Plus is maintained by an independent developer, and the earliest digitally signed build, Plus 0.5.0 in December 2020, was funded by Patreon donors. Before that, unsigned builds were falsely flagged by antivirus products, including Microsoft Defender. Paying for a certificate is, in part, paying for that kind of continuity.

Installing After Your Download

Installation requires administrator rights, because the program installs a kernel driver. The Plus installer is around 24 MB, and the default installation folder is C:\Program Files\Sandboxie-Plus\. You need 64-bit Windows 10 or Windows 11, on either x64 or ARM64; Windows 7 is treated as legacy, and 32-bit builds have not been produced since the 1.16 series. Hardware virtualisation is not required.

Every release note repeats the same advice about updating: if an update fails, uninstall the previous version while keeping the main configuration file, and then install the new build. Your boxes and settings survive that process because they live in the configuration rather than in the program folder.

Remember, finally, that a free installation is not antivirus. It isolates; it does not detect. Files you recover from a box are copies that leave the sandbox, and they should be scanned before you open them on the real system.

Frequently Asked Questions

Conclusion

The free tier of Sandboxie is a serious tool rather than a sampler. Standard Isolation boxes, snapshots, network rules and Windows 11 integration together cover the everyday reasons most people want a sandbox: trying unfamiliar programs, keeping a browser contained, and throwing away the residue afterwards. The long journey from shareware through freeware to an actively maintained open-source fork means that a home user can rely on it without spending anything, provided they remember that the download here is source code and that installers come from the releases page.

Certificates make sense when your needs move beyond that baseline: when you want sandboxed programs kept away from your personal files, when you require the stricter hardened configuration, when you work on ARM64 hardware, or when encryption and DNS filtering matter. They are mandatory, not optional, for commercial and educational use, where a Business certificate is needed for each PC. Judge the purchase by those specific needs rather than by a vague sense that paid must be better, and you will arrive at the right answer for your own machines.