Sandboxie: baixar versions anteriors

0 5 5
Release Notes
Sandboxie Plus 1.18.8 / Classic 5.73.8 brings important compatibility improvements for Firefox and other sandboxed browsers, with a particular focus on fixing video playback issues.
Video playback now works correctly in sandboxed Firefox on websites such as ESPN that rely on mediaCapabilities.decodingInfo() to check media support before starting playback. This resolves an issue that could leave videos unable to start on affected sites.
The release also improves AppContainer handling used by browsers and other applications to isolate their child processes. Fixes address missing sandbox permissions and overly restrictive substitute tokens that could prevent these processes from starting or accessing required system resources. Microsoft Edge can again use the corrected substitute token without enabling UnRestrictAppContainerToken by default.
A security fix addresses an out-of-bounds read in the GUI proxy’s MapWindowPoints handler that could expose service heap data to sandboxed callers. The Import Boxes workflow has also been corrected, allowing users to choose where imported sandboxes are created.
For existing sandboxes, the new fixboxdacls command in KmdUtil.exe adds missing AppContainer access permissions. Advanced configuration options provide additional control: KeepBroadGroupsInAppContainerToken=n restores the previous all-deny-only substitute token behavior, NeutralizeLowBoxToken=n allows direct NtCreateLowBoxToken calls through, and FakeAppContainerToken=n now allows sandboxed programs to create real AppContainer child processes.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie Plus 1.18.7 and Sandboxie Classic 5.73.7 have been released.
This maintenance update addresses several issues in Sandboxie’s core functionality, including root protection IOCTL handling and the mechanism used to apply low integrity labels. It also fixes an issue with the monitor API.
Additional fixes address Base64 decoding and file renaming through API_RENAME_FILE, along with corrections to template handling.
We recommend updating to benefit from these fixes. Thank you to everyone who continues to support Sandboxie and helps improve it through testing and bug reports.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie Plus 1.18.6 brings several fixes that improve stability and reliability, alongside expanded language support. This release adds Persian (Farsi) translations for SandMan, the Troubleshooting Wizard, and the installer, thanks to imalyzer’s contribution, making Sandboxie Plus more accessible to Persian-speaking users.
This update fixes an issue in SandMan where URL-encoded characters were incorrectly interpreted as message placeholders, resulting in corrupted SBIE message links. It also resolves updater issues to make the update process more reliable.
Further corrections address transient exemption handling and path handling, improving reliability in these areas. A potential null pointer exception when unloading the driver has also been fixed, preventing a possible crash during driver shutdown.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This release fixes a compatibility issue that caused Chromium-based browsers and many Electron applications to crash when launched in Application Compartment boxes. The cause was incorrect hook target detection. With this fixed, desktop applications built on Electron, including Claude Desktop and similar apps, should now run more reliably in these boxes.
It also fixes how Sandboxie handles File IDs queried through fsutil. These IDs are now inverted consistently with File IDs returned through other methods (#5612).
Sandboxie Plus 1.18.5 is primarily a maintenance and usability release, with the most visible improvements affecting INI editing and completion behavior while also tightening shell notification routing and addressing several smaller issues reported since the previous release.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This release focuses primarily on refinements to SandMan’s INI editor, shell notification handling, and several smaller reliability fixes.
The SandMan INI editor has received a substantial auto-completion overhaul. Completion candidates are now ranked using context-aware semantic matching and fuzzy matching, while metadata is synchronized independently for each editor instance. Refreshes are also deferred during rapid typing or deletion to reduce unnecessary updates and improve responsiveness.
The completion popup itself has also been refined. Candidate tooltips no longer retain stale information while editing, Template and TemplateReject entries now show only the relevant setting-name information, and large description tooltips have been adjusted to avoid jumping unnecessarily between sides or obscuring completion candidates.
Shell notification handling has also been updated. UseShellNotifyIconProxy remains enabled by default when OpenWinClass=* is configured, preserving the behavior required by these sandboxes, while other sandboxed processes now use direct routing by default unless proxying is explicitly enabled. To make troubleshooting this behavior easier, low-noise SbieTrace logging has been added for Shell_NotifyIconW calls. The trace records the notification message, icon identity using either NIF_GUID/GUID or HWND/uID, and whether the effective route was direct or through the proxy.
A problem with shortcuts created from SandMan’s File Panel has been fixed. Previously, the “Create Shortcut” action did not set a working directory, causing sandboxed applications to inherit SandMan’s current directory. Programs relying on relative paths could consequently fail to locate their data files. Shortcuts created through the File Panel now receive the appropriate working directory.
This release additionally fixes an incorrect return type in SbieSvc and corrects archive path cleaning behavior.
Sandboxie Plus 1.18.4 is primarily a maintenance and usability release, with the most visible improvements affecting INI editing and completion behavior while also tightening shell notification routing and addressing several smaller issues reported since the previous release.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus 1.18.3 is a maintenance release focused primarily on stability, usability, and compatibility improvements across SandMan, Start.exe, and the tracing subsystem.
The standalone SandMan trace monitor now provides a visible Cleanup Trace Log action, making it easier to clear accumulated trace data directly from the monitor.
Several issues in the SandMan user interface have been addressed. Changes made to the File Migration action dropdown are now correctly preserved when clicking Apply or OK while the editor still has keyboard focus. The File Panel and Browse Files views have also been improved when deleting files or folders: expanded directory states are retained, and the interface now restores the selection, keyboard focus, and scroll position to the nearest remaining item instead of unexpectedly resetting the view.
The trace logging subsystem received a number of stability and state-management fixes. Crashes and stale entries that could occur when clearing the Trace Log while both integrated and standalone trace views were open have been resolved. The standalone Trace Logging controls now correctly reflect the actual monitor state and no longer inadvertently disable logging when the monitor window is closed. When closing the standalone monitor while tracing remains active, Sandboxie now offers the choice to stop logging and clear the log, disable logging while retaining the existing log data, or leave logging running in the background.
Start.exe autorun handling has been made more robust. It now correctly handles oversized registry values, applies proper bounds to shortcut paths, supports paginated Startup directories, and dynamically allocates launch command lines instead of relying on fixed-size buffers. These changes improve reliability in systems with unusually large or complex autorun configurations.
This release also restores compatibility with Firefox 154 in Standard Isolation mode.
Finally, an initialization issue affecting sandboxed processes that already carry an AppContainer token has been fixed.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie Plus 1.18.2 / 5.73.2 is a maintenance and usability update that brings several refinements to SandMan, improves compatibility with recent Windows Insider builds, and fixes a number of long-standing UI and driver-related issues.
Sandboxed-window borders have gained new outside-border modes, allowing the configured border to be drawn outside the application frame. For maximized and snapped windows, the new BorderInsideMaximized=y option, enabled by default, automatically moves the border and label inside the window so they remain visible.
SandMan now remembers manually expanded and collapsed process-tree branches across refreshes and restarts. The Auto Expand Tree option has been adjusted accordingly and now acts as the default only for items without an explicitly remembered state. Sandbox groups are likewise kept in their chosen expanded or collapsed state more reliably.
A new global BoxAliasDisplayMode allows display-only aliases to be used for sandbox names throughout SandMan, Start.exe, window titles, borders, tooltips, recovery logs, and messages, while the actual sandbox name continues to be used internally for paths and operations. Imported sandbox archives can optionally restore their saved aliases as well.
The tray menu can now provide a literal search field for quickly filtering sandboxes and groups, and automatic sandbox cleanup gained an option to restore either the active or the default snapshot after deletion. Snapshot management and refresh controls have also been integrated into the relevant settings.
Trace Log handling has been improved so automatic scrolling no longer fights manual navigation. Scrolling away from the bottom now pauses auto-scroll and presents an in-list control for resuming it.
This release also updates DynData and restores driver compatibility with the latest Windows Insider builds, including validation against Windows build 29634.
Among the fixes are corrected File Panel column persistence, more reliable open-handle reporting, improved file sorting, proper Recycle Bin deletion of expanded directory trees, and a fix for registry hive log files such as RegHive.LOG1 and RegHive.LOG2 being incorrectly treated as descendants of RegHive. Several character-versus-byte buffer size issues affecting shortcuts, window class names, configuration reads, driver-log retrieval, and icon-path IPC handling have also been corrected.
ApiTrace has been reworked to avoid stack exhaustion on Cygwin and other environments using unusually small or alternate stacks, while retaining legacy event ordering and stack capture. Stack symbol resolution has also been improved by retrying unresolved addresses after process discovery and refreshing the DbgHelp module list when necessary.
Finally, the release fixes an issue where SandMan could unnecessarily offer to install the DbgHelp add-on when it was already present, as well as a ConfidentialBox=y elevation problem that could leave the user stuck on a black screen.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie Plus 1.18.1 introduces a number of usability improvements and important fixes focused on reliability and configuration management. SandMan now provides significantly enhanced INI setting validation and auto-completion, featuring support for disabled-setting aliases, localized descriptions, context-aware warnings, and template-specific metadata with improved tooltips, making advanced configuration easier and less error-prone. This release also adds new CopyNewer file migration rules, allowing existing files inside a sandbox to be automatically refreshed when the corresponding host file has been updated, while avoiding unintended overwrites during file creation or other write operations. Additionally, users who prefer opaque sandbox identifiers can now create sandboxes using GUIDs as box names.
This update also resolves several issues affecting day-to-day use. The incremental update mechanism has been fixed to correctly deploy newly added program files, ensuring updates are applied completely. Compatibility problems involving RunServiceAsSystem and UseSecurityMode have been addressed, including a fix for the cryptsvc service. The Chromium elevation template has been refined to use more granular service configuration for improved compatibility. Finally, multiple issues in the SOCKS5 proxy implementation have been resolved, fixing password authentication failures caused by credential decoding, locale-dependent encoding, invalid credential handling, and incomplete socket transmissions, resulting in a more robust and reliable proxy experience.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus 1.18.0 / Sandboxie 5.73.0 focuses on improving everyday usability, responsiveness, and Chromium browser compatibility, with particular attention given to one of the most frequently requested scenarios: sharing an existing browser profile between the host and a sandbox.
The most significant work in this release addresses long-standing issues affecting Chromium-based browsers such as Chrome, Edge, Brave, and other derivatives when using the host profile from within a sandbox. Previous versions could trigger browser setting resets due to Chromium's Secure Preferences protection, making profile sharing unreliable. This release introduces a compatibility workaround that preserves browser settings and extensions when a host profile is accessed from inside a sandbox, eliminating one of the biggest obstacles to this workflow. In addition, Sandboxie now properly supports Chromium's elevation service and the required DPAPI handling, allowing sandboxed browsers to access host credentials, cookies, passwords, and other protected data when the appropriate compatibility template is enabled. Together, these improvements make running a sandboxed browser against an existing host profile far more practical and transparent than before.
Recovery functionality has also received several improvements. RecoverFolder and AutoRecoverIgnore patterns now support wildcards, including recursive matching, providing much more flexible recovery configuration. AutoRecoverIgnore rules can now also be applied to the Quick Recovery dialog, while recovery handling itself has been refined to avoid unnecessary dialog closures and to provide a more consistent deletion workflow. Several issues affecting Immediate Recovery have been resolved as well, including problems caused by path casing differences and situations where recovery could become permanently suspended.
The SandMan user interface has been improved with pending-change highlighting in the Options and Settings dialogs. Responsiveness has also been significantly improved during periods of heavy Sandboxie logging by batching UI updates and reducing rendering overhead.
The crash dump mechanism has also been completely reworked. The new crash reporter provides a more streamlined experience and, if the user chooses, can automatically submit crash reports together with an optional comment, making it much easier to provide useful feedback and helping identify and resolve issues more quickly.
This release further resolves several smaller but noticeable issues throughout the project, including cleaner handling of expected system account lookups, correct display of network paths in notifications, and numerous fixes that improve overall stability and polish.
Overall, version 1.18.0 delivers a substantial quality-of-life update, with the new Chromium profile compatibility work standing out as a major improvement for users who rely on sharing their existing browser environment between the host system and Sandboxie.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie Plus 1.17.9 / Sandboxie 5.72.9 is now available with a collection of compatibility improvements, stability fixes, and quality-of-life enhancements.
This release introduces a new configuration option, DisableCustomTitleOpt, which gives users finer control over Sandboxie’s window title marking behavior. In the past, Sandboxie intentionally avoided adding its sandbox indicators to certain applications that use heavily customized title bars, such as those built with Delphi VCL, Qt, or Electron, because doing so could trigger excessive Desktop Window Manager repaints and high CPU usage. With the new option, advanced users can selectively re-enable title markers for these applications when desired.
The bundled ImDisk driver has also been updated to version 3.0.2, bringing the latest improvements and fixes from the upstream project.
Several issues reported by the community have been addressed in this build. Logging has been refined to suppress entries related to expected non-user security identifiers, helping reduce unnecessary noise in the trace logs. A problem affecting the "Run as Administrator" functionality, which could result in SBIE2218 and SBIE2219 service errors, has been corrected. In addition, a compatibility issue that could cause Windows Explorer to crash inside an Application Compartment environment when Huorong Security software was installed has been resolved.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie Plus 1.17.8 / Sandboxie 5.72.8 is now available with a collection of compatibility improvements, stability fixes, and quality-of-life enhancements.
This release introduces a new configuration option, DisableCustomTitleOpt, which gives users finer control over Sandboxie’s window title marking behavior. In the past, Sandboxie intentionally avoided adding its sandbox indicators to certain applications that use heavily customized title bars, such as those built with Delphi VCL, Qt, or Electron, because doing so could trigger excessive Desktop Window Manager repaints and high CPU usage. With the new option, advanced users can selectively re-enable title markers for these applications when desired.
The bundled ImDisk driver has also been updated to version 3.0.2, bringing the latest improvements and fixes from the upstream project.
Several issues reported by the community have been addressed in this build. Logging has been refined to suppress entries related to expected non-user security identifiers, helping reduce unnecessary noise in the trace logs. A problem affecting the "Run as Administrator" functionality, which could result in SBIE2218 and SBIE2219 service errors, has been corrected. In addition, a compatibility issue that could cause Windows Explorer to crash inside an Application Compartment environment when Huorong Security software was installed has been resolved.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This release focuses on stability and usability improvements. A new global option for ForceBoxDocs has been added under Program Control > Force Process Options, making it easier to configure forced document handling without editing the INI file manually.
The INI editor and completion system have received several improvements, including better context-aware suggestions, improved key resolution, more accurate matching, and better tooltip behavior. Rich text input has also been disabled in the "Edit INI Section" dialog to prevent formatting issues.
Several bugs have been fixed in this release. Most notably, a compatibility issue that could cause VMware guests running inside a sandbox to crash has been resolved. Problems affecting addon installation, encrypted sandbox imports, Data Protection sandboxes causing PowerShell to hang, folder enumeration and deletion, and black box import/export when SandMan is not running elevated have also been addressed. Additionally, improvements to short-name path handling and completion matching further enhance reliability and overall user experience.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus version 1.17.6 / 5.72.6 introduces a number of usability improvements, compatibility fixes, and refinements to box portability and management. The main application window will now clearly indicate when Sandboxie-Plus is running with elevated privileges by appending “(Administrator)” to the window title, helping users more easily distinguish between elevated and non-elevated sessions.
This release further improves the sandbox import and export workflow. The archive format has been revised to store sandbox configurations directly as BoxName.ini files using a [BoxName] section header, replacing the previous BoxName/BoxConfig.ini layout. The new format remains fully backward compatible, with imports supporting both the legacy and updated structures. In addition, the updated format is now fully aligned with the portable sandbox layout, allowing users to simply unpack an exported archive and immediately add the contained sandboxes as portable boxes without any additional conversion steps.
Several issues have also been addressed in this build. A problem affecting hook registration has been fixed, improving overall reliability and compatibility. Another important fix resolves excessive CPU usage caused by Desktop Window Manager (DWM) when running applications that use custom title bars, such as applications built with Delphi VCL, significantly reducing unnecessary system load in affected scenarios.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus version 1.17.5 (and the corresponding classic build 5.72.5) resolves several regressions introduced in recent releases and improves compatibility with certain desktop and shell interactions.
This update adds a workaround for applications that request the default desktop object and previously triggered the SBIE2205 OpenDesktop warning, improving compatibility with software that expects direct access to the default desktop environment.
A regression since version 1.17.3 that prevented sandboxes from being renamed has been fixed. The issue, which produced a “The parameter is incorrect” error, was caused by multi-line configuration values being rejected by the new ContainsCRLF validation in CIniFile::AddValue. The user interface has also been corrected to automatically reselect the sandbox after a successful rename.
Tray icons from sandboxed applications are now displayed correctly when OpenWinClass=* is used. This is achieved by proxying Shell_NotifyIcon calls so the icons are properly registered with the host shell. The behavior is enabled by default and can be controlled with the UseShellNotifyIconProxy option, which supports process and !process selectors.
Finally, window border handling has been improved when applications toggle the WS_EX_TOPMOST style. Sandboxie now tracks topmost state changes and adjusts window ordering accordingly to maintain correct border visibility and z-order.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus 1.17.4 / 5.72.4 introduces several improvements focused on compatibility, security, and overall stability. This update adds new controls for handling local loopback communication with the introduction of the BlockLocalLoop=y option, allowing users to explicitly block applications running inside a sandbox from connecting to services on the host through the local loopback interface.
To improve compatibility with modern desktop frameworks, Sandboxie-Plus now includes automatic detection of Electron-based applications. The primary heuristic runs early and is enabled by default, automatically applying the appropriate handling for Electron programs; it can be disabled with UseElectronDetection=n if required. In cases where this early heuristic fails or has been disabled, a secondary detection mechanism may later determine that the application is Electron-based after startup. Because this happens too late to apply the automatic workaround, Sandboxie-Plus will display the new SBIE2189 message to inform the user and provide troubleshooting guidance, suggesting the configuration option SpecialImage=chrome,program.exe for the affected application.
Hardware information protection has also been refined and can now be configured on a per-process basis, providing more granular control for users who need to selectively expose or restrict hardware identifiers to specific applications. Additionally, the driver now performs certificate verification using UTC time instead of local system time, preventing issues caused by incorrect local clock settings and ensuring consistent validation behavior.
A number of reliability problems have been resolved in this release. An issue affecting volatile configuration updates has been corrected, and a missing WaitServiceState call has been added to address cases where LINE failed to launch with a NO_SIGNATURE error. Stability improvements include fixing a race condition that could lead to a system crash during driver unload, correcting the verification logic used by Key_MergeSubkeys, and resolving a problem in Application Compartment mode related to File_WaitNamedPipe. Additional fixes address an IPC synchronization issue where Ipc_Handles_CritSec was not properly released when NtQueryDirectoryObject failed, as well as a bug that caused user interfaces of WebView2 applications built with Tauri to become unresponsive inside the sandbox.
As part of ongoing cleanup, the deprecated configuration option UseElectronWorkaround=y has been removed, as the new Electron detection mechanism supersedes the previous workaround. Overall, this release improves compatibility with modern application frameworks, strengthens certificate validation behavior, and resolves several stability issues, making it a recommended update for all Sandboxie-Plus users.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus 1.17.3 / 5.72.3 introduces a range of improvements to the user interface, tray integration, and sandbox usability, while also addressing several important security issues that make this update particularly important to install promptly.
A major focus of this release is security hardening. Several vulnerabilities reported by external researchers have been resolved, including a local denial-of-service issue that could be triggered by a sandboxed process (CVE-2026-32603) as well as a bypass of the EditAdminOnly configuration protection through INI CRLF injection. Additional fixes address weaknesses in ProcessServer name validation and NamedPipeServer parameter validation, further strengthening the robustness of Sandboxie-Plus’ service-side interfaces. An issue affecting the integrity verification of the built-in updater has also been corrected, ensuring that update files are validated reliably.
Another security-relevant correction concerns the EditPassword mechanism. Previously, password hashes suffered from reduced entropy, potentially weakening protection. Newly set passwords are now stored as salted SHA-256 hashes encoded in Base64. Users should note that this improvement only applies when the password is set or changed; existing stored hashes remain in the older weaker format until the password is updated.
Beyond these security fixes, the release also resolves a number of stability and correctness issues across the codebase. These include improvements to registry handling under WOW64 that ensure the correct inheritance of 32-bit and 64-bit registry views, fixes for handle leaks in the Start Menu scanning code, and corrections to several validation and parsing routines that could previously lead to inconsistent behavior. Additional bug fixes address crashes, configuration persistence problems, and various edge cases reported by users and contributors.
On the usability side, the release introduces configurable window placement controls that allow users to specify on which monitor Sandboxie interface windows open, including main, recovery, and notification dialogs, with a configurable fallback mode. A new “Label only” border mode has been added that hides the colored frame and displays only the sandbox name label, providing a cleaner visual indicator for boxed applications. The border rendering system also gained options for controlling label width and preventing labels from being clipped by the taskbar, as well as a capture-exclusion feature that prevents sandbox borders and labels from appearing in screenshots or screen recordings.
System tray behavior has been significantly enhanced with new customization options. Users can now control whether sandbox icons appear in tray menus, display sandbox aliases instead of internal box names, and configure when sandbox status tooltips are shown. Overlay icons indicating sandbox state—such as mounted disk images, RAM disks, or auto-delete status—can also be displayed directly in the tray list. Tray and submenu performance has been improved through more efficient icon caching and reduced repeated icon extraction.
Performance improvements extend to the SandMan GUI itself. Several internal caching changes reduce unnecessary icon loading and repeated system queries, lowering constant CPU usage in the interface. Network connectivity checks used by the updater have been throttled and cached to avoid unnecessary system registry queries and network attempts when the system is offline.
Additional improvements include a Windows 11 MIDI compatibility template contributed by the community, improved sandbox duplication behavior that preserves aliases and group assignments correctly, and refinements to sandbox border rendering and tray list scaling at high DPI.
Because this release fixes multiple security issues affecting both the service interface and configuration protection mechanisms, all users are strongly advised to update to Sandboxie-Plus 1.17.3 / 5.72.3 as 

0 5 5
Release Notes
Sandboxie-Plus 1.17.0 delivers significantly improved compatibility for UWP applications and App Compartment boxes, alongside usability enhancements and important stability fixes.
This version substantially improves the experimental UWP support across multiple layers of the architecture. A failure to mount the registry when launching UWP applications inside a sandbox has been resolved, restoring reliable startup behavior for modern Windows apps. Token handling has been refined to eliminate incompatibilities with the UWP security model, CopyTokenAttributes=y is now automatically applied to ensure correct attribute propagation required by UWP processes. To provide consistent behavior, SandboxieAllGroup=y is now the default, effectively standardizing the UseCreateToken=y code path, reducing dependency on undocumented kernel functions.
IPC handling in App Compartment type boxes has been further improved to increase reliability and compatibility with App Container based isolation. This fixes Microsoft Edge 144 crashes in Application Compartment Boxes. Furthermore, a new UseAlternateIpcNaming=y mode replaces the use of a separate NT object namespace by appending a suffix to sandboxed object names, instead of using an entirely separated object directory structure. This mode is restricted to App Compartment boxes, as for regular box types the object paths would otherwise be blocked by the driver.
User-facing transparency and workflow have been enhanced. Sandboxed windows now display the sandbox name directly in the border, and a new border mode ensures that the border is shown for every window belonging to sandboxed processes, not only the one currently in focus. Sandboxie service applications now include dedicated icons for clearer identification.
Isolation control has been extended, a new global option, ForceBoxDocs=y, allows administrators to force any program opening a file from a boxed path to start inside the corresponding sandbox, strengthening document-origin enforcement.
The SandMan UI can now export and import multiple sandboxes in a single operation, simplifying migration and backup procedures. Configuration handling has been improved as well, RenameSection processing now preserves original comments and section order, ensuring configuration files remain structurally clean and maintainable after modifications.
Several additional stability issues have been addressed. The CryptUnprotectData hook no longer returns an incorrect data description string. A handle leak in SbieDll.dll has been eliminated. Switching sandbox sorting in the user interface now behaves correctly. A crash in the file search bar triggered by performing multiple searches within a sandbox has also been resolved.
Overall, this release delivers materially improved UWP and App Compartment reliability, refined token handling semantics, updated Windows compatibility data, and a range of quality-of-life and stability enhancements.
Sandboxie-Plus 1.17.1 fixed an incompatibility with windows 10 introduced in 1.17.0.
Sandboxie-Plus 1.17.2 fixes a couple GUI glitches introduced in 1.17.0, and adds improved box renaming with full alias support.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus 1.17.0 delivers significantly improved compatibility for UWP applications and App Compartment boxes, alongside usability enhancements and important stability fixes.
This version substantially improves the experimental UWP support across multiple layers of the architecture. A failure to mount the registry when launching UWP applications inside a sandbox has been resolved, restoring reliable startup behavior for modern Windows apps. Token handling has been refined to eliminate incompatibilities with the UWP security model, CopyTokenAttributes=y is now automatically applied to ensure correct attribute propagation required by UWP processes. To provide consistent behavior, SandboxieAllGroup=y is now the default, effectively standardizing the UseCreateToken=y code path, reducing dependency on undocumented kernel functions.
IPC handling in App Compartment type boxes has been further improved to increase reliability and compatibility with App Container based isolation. This fixes Microsoft Edge 144 crashes in Application Compartment Boxes. Furthermore, a new UseAlternateIpcNaming=y mode replaces the use of a separate NT object namespace by appending a suffix to sandboxed object names, instead of using an entirely separated object directory structure. This mode is restricted to App Compartment boxes, as for regular box types the object paths would otherwise be blocked by the driver.
User-facing transparency and workflow have been enhanced. Sandboxed windows now display the sandbox name directly in the border, and a new border mode ensures that the border is shown for every window belonging to sandboxed processes, not only the one currently in focus. Sandboxie service applications now include dedicated icons for clearer identification.
Isolation control has been extended, a new global option, ForceBoxDocs=y, allows administrators to force any program opening a file from a boxed path to start inside the corresponding sandbox, strengthening document-origin enforcement.
The SandMan UI can now export and import multiple sandboxes in a single operation, simplifying migration and backup procedures. Configuration handling has been improved as well, RenameSection processing now preserves original comments and section order, ensuring configuration files remain structurally clean and maintainable after modifications.
Several additional stability issues have been addressed. The CryptUnprotectData hook no longer returns an incorrect data description string. A handle leak in SbieDll.dll has been eliminated. Switching sandbox sorting in the user interface now behaves correctly. A crash in the file search bar triggered by performing multiple searches within a sandbox has also been resolved.
Overall, this release delivers materially improved UWP and App Compartment reliability, refined token handling semantics, updated Windows compatibility data, and a range of quality-of-life and stability enhancements.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus 1.17.0 delivers significantly improved compatibility for UWP applications and App Compartment boxes, alongside usability enhancements and important stability fixes.
This version substantially improves the experimental UWP support across multiple layers of the architecture. A failure to mount the registry when launching UWP applications inside a sandbox has been resolved, restoring reliable startup behavior for modern Windows apps. Token handling has been refined to eliminate incompatibilities with the UWP security model, CopyTokenAttributes=y is now automatically applied to ensure correct attribute propagation required by UWP processes. To provide consistent behavior, SandboxieAllGroup=y is now the default, effectively standardizing the UseCreateToken=y code path, reducing dependency on undocumented kernel functions.
IPC handling in App Compartment type boxes has been further improved to increase reliability and compatibility with App Container based isolation. This fixes Microsoft Edge 144 crashes in Application Compartment Boxes. Furthermore, a new UseAlternateIpcNaming=y mode replaces the use of a separate NT object namespace by appending a suffix to sandboxed object names, instead of using an entirely separated object directory structure. This mode is restricted to App Compartment boxes, as for regular box types the object paths would otherwise be blocked by the driver.
User-facing transparency and workflow have been enhanced. Sandboxed windows now display the sandbox name directly in the border, and a new border mode ensures that the border is shown for every window belonging to sandboxed processes, not only the one currently in focus. Sandboxie service applications now include dedicated icons for clearer identification.
Isolation control has been extended, a new global option, ForceBoxDocs=y, allows administrators to force any program opening a file from a boxed path to start inside the corresponding sandbox, strengthening document-origin enforcement.
The SandMan UI can now export and import multiple sandboxes in a single operation, simplifying migration and backup procedures. Configuration handling has been improved as well, RenameSection processing now preserves original comments and section order, ensuring configuration files remain structurally clean and maintainable after modifications.
Several additional stability issues have been addressed. The CryptUnprotectData hook no longer returns an incorrect data description string. A handle leak in SbieDll.dll has been eliminated. Switching sandbox sorting in the user interface now behaves correctly. A crash in the file search bar triggered by performing multiple searches within a sandbox has also been resolved.
Overall, this release delivers materially improved UWP and App Compartment reliability, refined token handling semantics, updated Windows compatibility data, and a range of quality-of-life and stability enhancements.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This release of Sandboxie Plus focuses on stability, compatibility, and overall robustness across a wide range of real-world use cases. Several long-standing and high-impact issues have been resolved, particularly affecting popular applications such as web browsers, email clients, and Microsoft Office, resulting in a smoother and more reliable sandboxing experience.
Application compatibility has been significantly improved. Issues affecting recent versions of Thunderbird have been fixed, Firefox no longer triggers AppModel-Runtime errors in the Windows Event Viewer when run inside a sandbox, and Tor Browser is now stable even when operated at the highest security level. Problems specific to portable and sandboxed browser scenarios were also addressed, including a long-standing issue where Chrome Portable tooltips could become stuck.
System-level stability has been strengthened as well. A critical blue-screen crash in the Sandboxie driver under high GPU process creation load on Windows Server 2022 has been resolved, and crashes that prevented Microsoft Word from functioning correctly due to failures in OfficeClickToRun.exe have been fixed. In addition, Sandboxie now handles software lifecycle operations more efficiently, eliminating prolonged delays when uninstalling or removing applications that were installed exclusively within a sandbox.
Overall, this release prioritizes reliability and correctness in high-security and high-load environments, making Sandboxie Plus safer and more dependable for everyday use as well as professional and server-side deployments.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This update of Sandboxie-Plus enhances usability across the file panel and configuration interface. The file panel now supports an integrated search and filter function, which can be opened using Ctrl + F, allowing users to quickly locate items within large folder views. Additionally, a dedicated user interface option has been introduced for the ProtectAdminOnly=y/n setting, making this security configuration accessible without manual INI edits.
The release also addresses an issue in the 32-bit SbieDll.dll where SbieApi_QueryDrvInfo could trigger an incorrect certificate warning. This problem has been fully resolved to ensure accurate driver state reporting and eliminate unnecessary alerts.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This release of Sandboxie-Plus introduces a small but useful enhancement and several important refinements. A new checkbox for the “NoRestartOnPCA=y” setting has been added to the box options, giving users direct control without manual editing. The default value for “UseWin32kHooks” has been reverted from “y” back to “n” after it was found to cause compatibility issues with certain applications. Additionally, named syscall invocation under WoW64 has been improved to ensure more robust operation in mixed-architecture scenarios.
A significant focus of this update is stability, with several critical fixes in both user-mode and driver-level components. The “OpenWndStation=y” option now works correctly again when used together with “SandboxieAllGroup=y”.
Most importantly, this update includes fixes that directly affect the driver’s stability. A flaw that could lead to incorrect driver responses during certificate parsing and driver-info queries has been resolved, and a potential handle leak in SbieDll.dll involving SbieApi_DeviceHandle has been fixed as documented in issue #5097. These corrections eliminate scenarios that, under certain conditions, could have contributed to resource exhaustion or triggered system instability, reducing the risk of potential BSODs and improving overall reliability of the sandboxie.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This release delivers several important fixes and a key compatibility improvement to enhance the overall reliability and user experience of Sandboxie-Plus. A issue affecting Windows 7 users introduced in 1.16.5 has been resolved, ensuring that the program can once again establish a proper connection to the driver on this platform. Compatibility with recent Firefox Nightly builds (version 146) has also been addressed, allowing the browser to run correctly within the sandbox environment. This version also introduces a change to the default configuration: the UseWin32kHooks=y option is now enabled by default for all sandboxed processes. This adjustment significantly improves compatibility with Electron-based applications, reducing issues that some users previously experienced.
Overall, Sandboxie-Plus 1.16.6 / 5.71.6 continues the effort to refine system compatibility, stability, and performance across both legacy and modern Windows systems.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus 1.16.5 introduces a range of refinements and fixes aimed at improving both usability and stability across the board. One of the most notable improvements is the enhanced INI Editor, which now offers a much more capable “Edit INI Section” dialog, making configuration editing more intuitive and efficient. Custom box colors are now preserved even when changing the Box Type Preset, ensuring that user-defined visual customization remains consistent. The sandbox border settings have also been expanded with support for alpha transparency, giving users finer control over the appearance of sandbox indicators.
The context menu icons have been refreshed for a cleaner, more modern look, and the default toolbar configuration has been refined for better usability. Under the hood, the Win32 system call handling has seen an experimental improvement: when UseWin32kFilterTable=y is enabled, the driver will now make use of the KeServiceDescriptorTableFilter instead of KeServiceDescriptorTableShadow where appropriate, providing more accurate and secure filtering behavior.
This release also resolves several technical issues. The reliability of the BindAdapter feature has been improved when a VPN or bound adapter becomes disconnected. A long-standing issue involving registry handling was fixed where a WOW6432Node subkey could incorrectly become HKLM\SOFTWARE\WOW6432Node\WOW6432Node. Additionally, a security-related issue was addressed where programs started with their 8.3 filenames were not properly identified as forced or blocked programs.
Overall, version 1.16.5 refines the user experience, enhances customization and system integration, and delivers improved robustness in key areas of the Sandboxie-Plus platform.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus 1.16.4 / Classic 5.71.4 has been released on October 2nd, 2025. This version introduces a new protection option that blocks non-administrative instances of the session leader, such as Sandman.exe or Sbiectrl.exe, from accessing encrypted box data. This safeguard is enabled by default, though it can be disabled by setting ProtectAdminOnly=n if required. In addition to this enhancement, the release resolves a critical issue where Sandboxie-Plus 1.16.3 failed to connect to the driver on Windows Preview Build 27943, as tracked in issue #5003. Stability has also been improved with a fix for crashes related to the latest Signal client. Furthermore, the internal checks in Thread_CheckObject_CommonEx have been strengthened to provide more robust handling of encrypted boxes. This update continues the project’s focus on reliability, compatibility with evolving Windows builds, and stronger data protection.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This release focuses on improved compatibility and stability across modern and legacy Windows builds while polishing the user experience in dark mode and on high-DPI systems. We updated our GitHub build action to use Qt 6.9.2 and at the same time switched the product to Qt 6.8.3 with Windows 7 compatibility patches; driver imports were reworked so that binaries built with Visual Studio 2022 can still load correctly on Windows 7. We also validated compatibility with Windows build 27934 and refreshed DynData to reflect those changes.
Several reported issues have been addressed to restore expected behavior for users. The missing tray menu introduced in 1.16.2 has been fixed, and the UAC prompt layout now displays correctly at higher DPI on the secure desktop; Arabic users will find the UAC prompt dialog respects RTL layout. The dark mode help popup that previously showed a light background in 1.16.1 has been corrected. Network options can now be persisted correctly during editing, the installer will remove obsolete files from older 1.16.x installations during cleanup, and the problem that prevented the “restart as admin” window from appearing has been resolved.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
The final release of Sandboxie-Plus version 1.16.2 / 5.71.2 consolidates and builds upon the significant advancements introduced in the recent pre-releases, delivering a more secure, compatible, and modernized sandboxing experience.
This version marks a major step forward in platform modernization. The underlying codebase has been updated to the MSVC 2022 toolset, while the user interface has migrated from Qt 5 to Qt 6. These changes provide better performance, improved security, and access to newer development features. However, they also necessitate the discontinuation of support for Windows 7 and 32-bit systems. Depending on user interest, an Extended Support Release (ESR) for older systems may be considered.
The update further refines usability and functionality. A new INI key validation feature, complete with per-key tooltips, has been integrated into the INI section editor, making advanced configuration safer and more accessible. SandMan now also supports an optional Windows 11-style visual theme, enhancing UI consistency on modern systems.
A major new feature allows administrators to redirect all files marked with the "Mark of the Web" into a designated sandbox, improving security by isolating potentially unsafe downloads. Forced process rules now support wildcards, and virtual sandboxes can be created without being written into the main configuration file, ideal for temporary or dynamically managed setups.
Under the hood, the DNS filter logic has been hardened to prevent unresolved domains from bypassing filtering, addressing a potential security flaw.
Additional improvements to system object handling now cover EventPair, KeyedEvent, and Timer types, enhancing compatibility with more applications.
The UAC subsystem can now invoke Sandboxie's own prompt, capable of simulating administrative rights without actual elevation, for more secure testing scenarios.
This release also addresses a range of bugs. Issues with incomplete shortcut paths, broken network adapter isolation, misinterpreted backslash-prefixed file paths, and language mismatches during installation have been resolved. The UAC prompt layout has been visually refined, and a long-standing fullscreen issue with Firefox’s taskbar behavior has been fixed. Moreover, Firefox compatibility has been improved for both stable and Nightly builds, resolving recent hook-related failures. An important security issue involving sandbox key leaks during encrypted volume password changes has also been mitigated by backporting hardened logic from MajorPrivacy.
Together, these changes offer a more future-proof, stable, and secure experience for Sandboxie-Plus users.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie Plus version 1.15.12 / 5.70.12 introduces a range of enhancements, fixes, and usability improvements. This release adds Indonesian language support to the Plus UI, a new template for the WeType Input Method Editor (IME), and support for proxy configuration using host names instead of raw IPs by resolving them at WSA_Startup. Sandboxie can now bind to network adapters rather than specific IP addresses, providing more flexibility in networking setups. Additionally, support for the %ProgramFiles(x86)% environment variable has been introduced, along with a new TemplateDefaultFolders entry to define standard paths in privacy-enhanced boxes.
Several changes improve usability and performance. The "Move Sandbox" list sorting behavior has been refined, and personal details like name and hardware ID in the Support tab are now hidden by default. An experimental alternative proxy relay implementation has also been added, shifting from socket modification to relay threads.
Numerous issues have been addressed. These include the BoxAlias not appearing in the "run in box" dialog, UI inconsistencies after using Ctrl+F, and persistent high I/O usage by SbieCtrl.exe and SandMan.exe. Registry access functions were hardened with additional checks, and problems with Tencent TIM, MSI installer behavior, and oversized Sandboxie.ini files have been resolved. Other fixes address UI glitches, translation inconsistencies, drag-and-drop issues, and crashes related to SbieDll.dll. Compatibility problems with PingInfoView and a loop condition in CollectProducts() have also been fixed.
For a full list of changes please review the change log.
Known Issue
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This release primarily addresses critical compatibility issues with Firefox, ensuring that version 137.0 and later now runs correctly within Sandboxie Plus without generating SBIE2328 notifications. This fix restores proper functionality for Firefox users, resolving a major disruption introduced in the previous version.
In addition to the Firefox fix, this update introduces a new configuration option, BindAdapterIP, which allows users to bind sandboxed applications to a specific host IP address. This can be defined globally or per process via the INI file, offering greater control over network behavior within the sandbox. It’s important to note that the specified IP must be bound to a local network interface, or connections will fail.
Several additional issues have been resolved, including problems affecting Thunderbird. Memory leaks related to process command line retrieval have been addressed, and missing components like SbieShellExt.dll have been restored. And issues with DLL injection afecting SbieHostDll.dll and custom injection dll's.
For a full list of changes please review the change log.
Known Issue
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This release primarily addresses critical compatibility issues with Firefox, ensuring that version 137.0 and later now runs correctly within Sandboxie Plus without generating SBIE2328 notifications. This fix restores proper functionality for Firefox users, resolving a major disruption introduced in the previous version.
In addition to the Firefox fix, this update introduces a new configuration option, BindAdapterIP, which allows users to bind sandboxed applications to a specific host IP address. This can be defined globally or per process via the INI file, offering greater control over network behavior within the sandbox. It’s important to note that the specified IP must be bound to a local network interface, or connections will fail.
Several additional issues have been resolved, including problems affecting Thunderbird. Memory leaks related to process command line retrieval have been addressed, and missing components like SbieShellExt.dll have been restored.
For a full list of changes please review the change log.
Known Issue
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie Plus 1.15.9 delivers a robust update centered on security, stability, and compatibility—particularly for users of modern web browsers and those prioritizing privacy and sandbox integrity.
A key highlight is the improved compatibility with Firefox 137 Nightly and later, resolving previous hooking issues that caused instability or functional limitations. Firefox now runs smoothly within sandboxed environments once again.
Security enhancements are another major focus. This release addresses a potential IP leakage vulnerability affecting dual-stack IPv4/IPv6 setups when only one proxy type was configured. Connections now fail gracefully if no proxy is set for the relevant IP type, effectively preventing unintentional bypasses and preserving user anonymity—a critical improvement for users relying on VPNs or proxies.
Additionally, a serious local privilege escalation vulnerability tied to the HostInjectDll mechanism has been patched, thanks to responsible disclosure. This fix strengthens Sandboxie's role as a secure execution layer.
For advanced users, a new debug option OpenAllSysCalls=y has been added, allowing unrestricted system call access for testing purposes. However, due to its permissive nature, it should be used with caution.
Among the usability improvements, users can now duplicate sandboxes and their contents directly from the UI, streamlining environment management. The update also introduces a new developer certificate type that disables user-mode component verification for advanced use cases. This node-locked certificate is available at no additional cost to existing Contributor or Eternal/Huge certificate holders upon request.
Overall, version 1.15.9 brings a thoughtful balance of new features, critical fixes, and user-focused enhancements, reinforcing Sandboxie Plus as a powerful tool for secure application isolation.
For a full list of changes please review the change log.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
Sandboxie-Plus v1.15.8 / Classic v5.70.8 introduces several improvements and fixes to enhance usability and stability. The sandbox deletion confirmation prompt has been refined for better clarity. The online updater has been updated to ensure smoother updates, and the Plus installer now includes the ImDisk 3.0 driver for 64-bit systems, expanding its functionality.
This release also addresses key issues reported by users. A problem where the "WriteFilePath" setting was not functioning correctly has been resolved, ensuring expected behavior when writing files. Additionally, an issue with Box Notes that caused matching lines to be deleted upon saving has been fixed, restoring proper note-taking functionality.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
In this update, several improvements and fixes have been introduced to enhance the stability and functionality of Sandboxie Plus.
A new capability has been added to the service, allowing it to log monitor events, providing users with additional insights and diagnostics.
The Notepad++ template has been updated to ensure compatibility with Sandboxie Classic, improving usability for users of the legacy version. Additionally, MiscHelpers.dll has been updated with enhancements to the finder, contributing to improved performance and reliability.
Several issues have been resolved in this release. Obsolete entries in the Sandboxie Plus installer have been removed, ensuring a cleaner installation process. An issue where pinned shortcuts created via the 'Run from Start Menu' option were non-functional has been fixed, addressing reported concerns (#4502). A potential Blue Screen of Death (BSoD) issue with the driver under low-resource conditions has been resolved, improving overall system stability.
Further refinements include fixing a crash occurring in NsiAllocateAndGetTable, thanks to a report from tzf-omkey (#4511). Additionally, two memory leaks have been addressed: one occurring when a sandboxed process received a device change notification, and another affecting the NtQueryDirectoryFile hook, which previously manifested in privacy-enhanced sandboxes (#4509).
This update ensures a more robust and efficient experience for Sandboxie Plus users. As always, feedback and reports from the community are invaluable in maintaining and improving the software.
For a full list of changes please review the change log.
Anouncement
Additionally, I am pleased to announce that TaskExplorer, a powerful system exploration tool first launched in 2019, has been revitalized and is now production-ready thanks to its fully signed driver. With a host of new features and enhancements, including advanced security options, expanded data columns, and improved usability, TaskExplorer is an ideal choice for both casual users and IT professionals. For more details and to download the latest release, visit: TaskExplorer on GitHub.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5
Release Notes
This update introduces improvements to stability, compatibility, and debugging tools, addressing several reported issues affecting various applications and sandbox configurations.
This release also includes a rework of CreateDesktop handling, which addresses various issues encountered with browsers and browser-based applications when running within Sandboxie. These changes should result in improved stability and functionality for affected software. Furthermore, a missing hook for NtQueryInformationByName has been implemented to enhance overall system compatibility.
Several bugs have been resolved in this update. An issue where the Sandboxie Plus data folder was not functioning correctly after updating to version 1.15.5 has been fixed. Additionally, crashes affecting Adobe Acrobat Reader when used within an Application Compartment box have been resolved.
Compatibility issues with Viber have also been fixed, ensuring that the software no longer crashes upon launch within Sandboxie. Users of qutebrowser will benefit from a fix that now allows the browser to run properly in a sandboxed environment. A problem preventing applications from launching when ApiTrace was enabled in version 1.15.5 has also been resolved. Lastly, a critical fix has been implemented to prevent blue screen errors (BSoD) when using OpenWndStation=y on Windows 10 with applications that call CreateDesktopW/A.
This release provides key stability and usability improvements for Sandboxie Plus, ensuring better compatibility across a range of applications.
For a full list of changes please review the change log.
Anouncement
Additionally, I am pleased to announce that TaskExplorer, a powerful system exploration tool first launched in 2019, has been revitalized and is now production-ready thanks to its fully signed driver. With a host of new features and enhancements, including advanced security options, expanded data columns, and improved usability, TaskExplorer is an ideal choice for both casual users and IT professionals. For more details and to download the latest release, visit: TaskExplorer on GitHub.
You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5Release Notes
This release introduces several important fixes to enhance functionality and improve user experience.A new debugging feature has been added with the inclusion of the HookTrace=y setting, which provides enhanced debugging capabilities for API hooking.The Sandboxie-Plus data folder has been relocated from C:\Users[User]\AppData\Local\Sandboxie-Plus to C:\Users[User]\AppData\Local\Xanasoft\Sandboxie-Plus. This change is automatic for users upgrading to this version, but those downgrading to an older version will need to move the folder back manually. Additionally, some options in the box context menu have been re-ordered for improved usability.This update resolves several critical issues and enhances overall stability. The crash triggered by selecting "Run as Administrator" in the non-advanced view has been fixed, along with a crash caused by missing IP definitions in DNS filtering (#3600, #4475).
Compatibility with ARM64 systems has been significantly improved, addressing issues such as x64 executables failing to run on Windows 11 ARM64 (#4422, #4415) and resolving compatibility MSEdge and explorer problems with Windows 10 ARM64.Several user experience issues have also been addressed. These include process self-termination failures, infinite loops when Gui_ConnectConsole waited for SbieSvc.exe to quit (#4462), and missing program icons when paths with spaces were specified in the RunCommand setting (#4416). Additional fixes include template scanning reliability (#4401) and the proper display of credential dialogs for RDP connections in encrypted boxes (#4389).This update aims to provide a smoother, more reliable experience across supported platforms, particularly for users on ARM64 systems.For a full list of changes please review the change log.Anouncement
Additionally, I am pleased to announce that TaskExplorer, a powerful system exploration tool first launched in 2019, has been revitalized and is now production-ready thanks to its fully signed driver. With a host of new features and enhancements, including advanced security options, expanded data columns, and improved usability, TaskExplorer is an ideal choice for both casual users and IT professionals. For more details and to download the latest release, visit: TaskExplorer on GitHub.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5Release Notes
This build resolves many issues including multiple system stability issues.For a full list of changes please review the change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5Release Notes
We are excited to announce the latest updates to Sandboxie Plus 1.15.3, these updates introduce impactful new features, significant improvements, and critical fixes to enhance user experience, customization, and security.For enhanced security, this release includes a mechanism to restrict access to sandbox folders to the user who created them. Users can also choose to retain or modify Access Control Lists (ACLs) on sandboxed files, providing more flexibility in access management, though this may introduce compatibility issues in some cases. Importantly, this update addresses a security vulnerability documented under CVE-2024-49360.This release also includes the introduction of a user proxy mechanism, enabling user-specific operations, along with support for the Encrypting File System (EFS). By adding the configuration EnableEFS=y to sandbox settings, users can now utilize EFS within the sandbox environment. The new OpenWPADEndpoint=y option allows access to system proxy configuration, expanding sandbox functionality. Additionally, trace logging filtering has been enhanced, and by enabling LogMessageEvents in global settings, all Sandboxie events can now be logged directly to the Windows Event Log for better tracking and analysis.Technical improvements in this release include refinements to the startup processes for SandboxieCrypto, ensuring smoother operations. Applications launched via drag-and-drop now consistently use their parent folder as the working directory, improving user experience. Compatibility with Windows build 27749 has been validated to ensure a seamless experience for users. Additionally, crashes affecting Firefox Nightly have been resolved, ensuring better browser compatibility.We thank our contributors and users for their invaluable feedback and support. Update now to take advantage of the latest features, enhancements, and security improvements in Sandboxie Plus.For a full list of changes please review the change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5Release Notes
This build fixes various issues and adds a few features, for a full list of changes please review the change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

0 5 5Release Notes
This build fixes various issues and adds a few features, for a full list of changes please review the change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

In this release, we have introduced several new features and improvements that significantly enhance the user experience and provide greater flexibility in system operations. Most notably, users can now effortlessly obtain free 10-day evaluation certificates directly from the support settings page within the UI. These certificates are hardware-locked to the user's machine and allow for up to three requests per hardware ID, making it easier to test and evaluate the system with minimal setup.Furthermore, new options have been added to increase privacy and security, such as the ability to modify the Windows Product ID in the registry to a random value and to return random values for disk serial numbers and network adapter MAC addresses when queried by applications. These features add an extra layer of obfuscation to protect against unwanted system identification.Other enhancements include the ability to terminate all processes when Sandman exits, a new option for configuring DropConHostIntegrity directly from the UI, and an improved shared template feature in the New Box Wizard. The number of available shared templates has increased to 10, and the template names can now be easily updated by adjusting the corresponding settings.In terms of fixes, we have addressed several key issues, including improving the "HideDiskSerialNumber" functionality to prevent application crashes, correcting the format of encrypted proxy passwords, and resolving an issue related to the "NtQueryDirectoryObject" function to avoid easy sandbox detection. These updates contribute to a more stable and secure environment for users.For a full list of changes and fixes please review the full change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

In this release, we have introduced several new features and improvements that significantly enhance the user experience and provide greater flexibility in system operations. Most notably, users can now effortlessly obtain free 10-day evaluation certificates directly from the support settings page within the UI. These certificates are hardware-locked to the user's machine and allow for up to three requests per hardware ID, making it easier to test and evaluate the system with minimal setup.Furthermore, new options have been added to increase privacy and security, such as the ability to modify the Windows Product ID in the registry to a random value and to return random values for disk serial numbers and network adapter MAC addresses when queried by applications. These features add an extra layer of obfuscation to protect against unwanted system identification.Other enhancements include the ability to terminate all processes when Sandman exits, a new option for configuring DropConHostIntegrity directly from the UI, and an improved shared template feature in the New Box Wizard. The number of available shared templates has increased to 10, and the template names can now be easily updated by adjusting the corresponding settings.In terms of fixes, we have addressed several key issues, including improving the "HideDiskSerialNumber" functionality to prevent application crashes, correcting the format of encrypted proxy passwords, and resolving an issue related to the "NtQueryDirectoryObject" function to avoid easy sandbox detection. These updates contribute to a more stable and secure environment for users.For a full list of changes and fixes please review the full change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

This build fixes various bugs and adds some minor improvements.For a full list of changes and fixes please review the full change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

This build fixes various bugs and adds some minor improvements.For a full list of changes and fixes please review the full change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

This releases fixes a few issues with 1.14.3 and provides a production ready 1.14.x build.For a full list of changes and fixes please review the full change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

In the 1.14.x release line, several significant updates and fixes have been introduced to enhance the functionality and performance of sandboxed processes. These enhancements are aimed at providing users with a more robust and versatile experience, ensuring smoother and more secure operations.One of the major updates is the introduction of the ability to force sandboxed processes to use a predefined SOCKS5 proxy. This feature allows for more controlled and secure network interactions. Additionally, the capability to intercept DNS queries for logging or redirection has been added, providing administrators with greater oversight and flexibility in managing network traffic. Notably, support for SOCKS5 proxy authentication based on RFC1928 has been incorporated, thanks to Deezzir's contributions, who also developed a Test Dialog UI for the SOCKS5 proxy. It is important to note that utilizing the Proxy and DNS features requires an advanced type certificate.The release also introduces a new command line option, /fcp /force_children, to the start.exe utility. This option enables the initiation of a program outside the sandbox while ensuring that all its child processes are sandboxed, enhancing security without compromising flexibility. Additionally, a new feature allows for the limitation of memory usage and the number of processes within a single sandbox through job objects. This was made possible by Yeyixiao's contribution and can be configured using "TotalMemoryLimit" for overall sandbox memory limits and "ProcessMemoryLimit" for individual process limits.Further improvements include the addition of a new "Sandboxie\All Sandboxes" SID to the token creation process, which fundamentally alters the token creation mechanism. This feature can be activated with the "SandboxieAllGroup=y" setting. Users can now also configure the "EditAdminOnly=y" setting on a per-box basis, providing more granular control over administrative permissions. Additionally, a new UI option allows users to start unsandboxed processes while forcing child processes into a sandbox, and the "AlertBeforeStart" option prompts a warning before launching a new program into the sandbox if the initiating program is not a Sandboxie component.Moreover, the update introduces a mechanism to block unsafe calls via RPC Port message filtering and a template to prevent sandboxed processes from accessing system information through WMI. A new "Job Object" Options page has been added, consolidating all job object-related options for easier management. Several critical fixes have been implemented, including resolving Chrome printing problems and various bugs affecting sandbox properties and program launching. Compatibility with Steam running sandboxed has also been improved.Compatibility with Windows build 26217 has been validated, and dynamic data has been updated accordingly. Finally, an issue with an early batch of Large Supporter certificates has been resolved, ensuring smoother operation and fewer disruptions. These updates collectively enhance the security, performance, and usability of sandboxed processes, providing users with a more reliable and efficient environment.For a full list of changes and fixes please review the full change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

In the latest update of Sandboxie Plus, we have introduced several enhancements and fixes to improve user experience. Notably, file version information for SbieDll.dll and SbieSvc.exe has been added to the Sandboxie Plus About dialog. We have made improvements to the checkboxes related to the DropAdminRights feature in SandMan. This release also addresses several important bug fixes: an issue with symbolic linking of files has been resolved, and corrections have been made to the start agent option and the Delete V2 functionality that was previously introduced in version 1.13.5. These updates ensure better stability and functionality of the Sandboxie Plus software.For a full list of changes and fixes please review the full change log.You can support the project through donations, any help will be greatly appreciated.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

- The RAMDisks integration is available to all project supporters with a valid supporter certificate, it allows for seamless RAMDisk usage once configured on the add-on options settings page and enabled for selected sandboxes.
The RAMDisk can be mounted without a drive letter providing a seamless experience, the appropriate Folders on the shared RAMDisk are linked to the default box root folder locations.
The RAMDisk is NOT persistent this means that all data stored on the RAMDisk vanish once the system is rebooted, making such a sand box ideal to store transient confidential data.
- The Encrypted Box Image feature uses encrypted container files to store a boxes root directory (containing all files and the boxes registry hive) the mounted encrypted volume is by default guarded by the driver such that only processes runnign within the sandbox (and essential sbie+ components) can access the files stored on that volume.
In combination with the "ConfidentialBox=y" option, host process read access to sandboxed processes memory is effectively blocked, ensuring no rogue process on the host can access confidential data in RAM belonging to sandboxed processes.
The combination of this mechanisms creates secure enclaves, which ensure data processed within an enclave can not leak to the host (except for user configured OpenFilePath locations) and is protected even when the host would to be compromised (only adversaries which obtained kernel level privileges can bypass these mechanisms).

[5.55.18] - 2022-04-13
Added
• added minor browsers to BlockSoftwareUpdaters template (by APMichael) #1784

Changed
• Failed memory read attempts to unboxed processes will no longer cause message 2111 by default
-- Note: the message can be enabled in the settings if desired with "NotifyProcessAccessDenied=y"
• reordered BlockSoftwareUpdaters template (by APMichael) #1785

Fixed
• fixed pipe impersonation in compartment mode
• fixed issue with box clean-up introduced in a recent build
• fixed missing trace log cleanup command #1773
• fixed unpin did not work #1694

[5.55.17] - 2022-04-02
Added
• added checkbox for easy read access to memory of unsandboxed processes (old Sbie behaviour, not recommended)

Changed
• improved OpenProcess/OpenThread logging

Fixed
• fixed crash issue with the new monitor mode
• fixed issue with resource access entry parsing

[5.55.16] - 2022-04-01
Added
• FIXED SECURITY ISSUE memory of unsandboxed processes can no longer be read, exceptions are possible
-- you can use ReadIpcPath=$:program.exe to allow read access to unsandboxed processes or processes in other boxes
• Added "Monitor Mode" to the resource access trace, similar to the old monitor view of SbieCtrl.exe

Changed
• EnableObjectFiltering is now set enabled by default, and replaces Sbie's old process/thread handle filter
• the $: syntax now accepts a wildcard $:* no more specialized wildcards though

fixed
• fixed NtGetNextProcess being fully disabled instead of properly filtered
• fixed reworked image name resolution when creating new processes in a sandbox
• fixed regression with HideOtherBoxes=y #1743 #1666

[1.0.15 / 5.55.15] - 2022-03-24
Fixed
• fixed memory corruption introduced in the last build causing chrome to sometimes crash.
• FIXED SECURITY ISSUE: NtCreateSymbolicLinkObject was not filtered (thanks Diversenok)

[1.0.14 / 5.55.14] - 2022-03-23
Added
• added notification window to warn that the default update checker is often behind the newest release on GitHub, to ensure that only bug-free builds are offered as updates #1682
• added main browsers to BlockSoftwareUpdaters template (by Dyras) #1630
• added a warning when sandboxie-plus.ini is not writable #1681
• added cleanup for critical sections (by chunyou128) #1686

Changed
• improved command line handling for breakout processes #1655
• disabled SBIE2193 notification (by isaak654) #1690
• improved error message 6004 #1719

Fixed
• fixed dark mode issue with the new tray list
• fixed now showing a warning when sandboxie-plus.ini is not writable #1681
• fixed issue with software compatibility checkbox (thanks MitchCapper) #1678
• fixed issue with events on box close not always being executed #1658
• fixed memory leaks in key_merge.c
• fixed issue enumerating registry keys in privacy mode
• fixed setting issue introduced in 1.0.13 #1684
• fixed crash issue when parsing firewall port options
• FIXED SECURITY ISSUE: in certain usage cases a sandboxed process could obtain a handle on a unsandboxed thread with write privileges #1714