Even though the security of Windows 10 has improved a great deal over the years, you still can’t be too careful when downloading mysterious software from the Internet, opening somewhat suspicious email attachments, and so on. That’s one way sandboxing comes in handy. A sandbox is a virtual environment where you can install and run new or untrusted apps without letting them harm your system.
This means you get to download the software, open it and play around with it while seeing whether it behaves suspiciously in a safe isolated space. If the software checks out, you can close the sandbox (automatically deleting any data within it), then download the software for real!
There are tons of different sandbox applications for Windows 10, with many working slightly differently and focused around different tasks. The following list are the best ones you can download today.
1. Enable Windows 10 Sandbox
If you have the Pro, Enterprise or Education versions of Windows 10, then you have access to a bunch of new features. One of the best (and well hidden) of these is the sandbox feature which you can enable with a few simple clicks.
To enable Windows Sandbox, click Start, then search for “windows features” and click “Turn Windows features on or off.” In the new window, scroll down and check the “Windows Sandbox” box, click OK and reboot your PC.
You should now be able to search for “windows sandbox” through the Start menu. Find it there, click it to open it, and you’re away.
If you don’t see the Sandbox option, then you may need to go to your motherboard BIOS (normally by pressing the Delete, F2 or F8 keys as your PC is booting) and have a look around to enable hardware virtualization.
2. BitBox (Browser in the Box)
Short for “Browser in the Box,” this tool is specifically designed for web browsing in a sandbox environment. It comes in both Chrome and Firefox flavors and is pretty much a Virtualbox instance of Linux designed specifically for browsing, which means it’s a little more memory-demanding than other options on this list.
BitBox has the capability of downloading files to your actual PC, so it’s important that you decide whether you want this to happen and set it up appropriately. It takes crucial precautions, like disabling your microphone and monitoring all host-BitBox interactions, making it a solid and secure choice.
BufferZone is an endpoint sandbox tool, which means if you’re heading to parts of the Internet that may be a bit dangerous to your computer security, or someone hands you a USB stick that you don’t quite trust (that happens to everyone, right?), it may be a good idea to run those through BufferZone. It’s easy to add different programs to run through BufferZone, and every major web browser works well with it.
One advantage of this over other sandbox software is that you don’t need to do much tinkering to get it up and running. Keeping your chosen activities in a secure Virtual Zone, BufferZone makes it impossible for web-based malicious software to get onto your PC. Everything you run through it becomes “read-only,” so no nasties can write themselves onto your hard drive.
Sandboxie is one of the most popular and most used applications to sandbox and isolate programs from the underlying Windows operating system. Two great aspects are that Sandboxie is very lightweight and free. You can install and run almost any Windows software through Sandboxie. Besides installing software inside Sandboxie, you can run any already installed program, like your web browser, via Sandboxie. All you have to do is select “Sandbox -> Default Box -> Run Sandboxed -> Run Web browser.” If you want to run any other application, select “Run Any Program.”
When you run a program in Sandbox mode, you will see a thick yellow border around the window to let you know you are in a sandboxed environment. Sandboxie comes in both free and paid versions, where the free version lacks some important features, like forced programs, the ability to run multiple sandboxes, etc. However, for a general home user, the free version should suffice.
5. SHADE Sandbox
Shade Sandbox is yet another popular, free sandboxing application. Compared to Sandboxie, the user interface of Shade is much simpler, straightforward, and beginner-friendly.
To sandbox an application, just drag and drop it into the Shade Sandbox window. The next time you launch the application, it will be automatically sandboxed.
When using Shade Sandbox, all your browsing history, temporary files, cookies, Windows registry, system files, etc., are well isolated from the operating system. Any files downloaded when using Shade will be stored in the Virtual Downloads folder, which can be accessed from within the Shade interface. If you are looking for a sandbox application with a simpler user interface, than Shade Sandbox is for you.
6. Toolwiz Time Freeze
Toolwiz Time Freeze works very differently from the above sandbox applications. When you install Toolwiz Time Freeze, it creates a virtual copy of your entire system settings and files and saves the state. After using the application you want to test, just reboot the system, and it will be automatically restored. This type of application is pretty useful when you want to thoroughly test a program with no limitations but don’t want the program to make any changes to the host operating system.
7. Shadow Defender
Shadow Defender is just like Toolwiz Time Freeze. When you install and initialize the software, you will be prompted to virtualize your system drive and any other drives of your choice. Once the system has been virtualized, any changes made to it are discarded when you reboot the system the next time.
Of course, you can always specify files and folders to exclude from Shadow Mode. This lets you pick and choose which changes to keep and which changes to discard. When in Shadow Mode, if you want to save a downloaded file or commit to a system change, all you have to do is click on the “Commit Now” button in the main window.
8. Create a Virtual Machine
What all the above sandbox apps do is generally known as light virtualization. That is, the apps you are testing are still running on the host operating system, albeit in a limited way. If you want full virtualization, there is no better way than to create a virtual machine of the operating system of your choice in either Virtual Box or VMware. (Here’s our comparison of the two.)
Once you’re done poking around with these sandbox applications for Windows, why not put your real PC through its paces by running a few benchmarks? Head on over to our guides on how to benchmark your CPU and how to stress-test your GPU in Windows 10.