Sandbox is a feature in the paid version of Avast One that allows you to browse the web or run applications in a virtual, safer environment that is isolated from the rest of your Windows system. This feature is useful when you want to run suspicious or untrusted applications, as it helps to mitigate potential risks.

Run applications in Sandbox

To run an application in Sandbox via the Sandbox screen in your Avast One:

1. Open Avast One and go to Explore ▸ Sandbox ▸ Open Sandbox.
2. Ensure the Applications tab is selected and click + Run in Sandbox.
3. Select the application file (.exe) and click Open.

The application opens in a virtualized window indicated by a colored border and the label Avast Sandbox. To end the virtualized session, click the X icon in the top-right corner of the window to close the app.

Always run in Sandbox

You can set up specific applications to always run in Sandbox:

1. Open Avast One and go to Explore ▸ Sandbox ▸ Open Sandbox.
2. Select the Permanent Apps tab and click + Add application.
3. Select an app using either of the methods below:
   • Option A: Click an application in the list to instantly add it.
   • Option B: Click Select app manually, then select the application and click Open.

The application will now automatically run in Sandbox every time you open the application.

To remove an app from the virtualization list, hover the cursor over the app's panel and click the X icon.

Manage Sandbox settings

To access Sandbox settings:

1. Open Avast One and go to Explore ▸ Sandbox ▸ Open Sandbox.
2. Select the Settings tab.
3. The following options are enabled by default. To disable a setting, untick the box next to the relevant option:
   1. Show Avast One Sandbox in the Windows context menu: Allows you to right-click an application icon and select Run in sandbox or Always run in sandbox. Disabling this option removes the Sandbox commands from the Windows context menu.
   2. Allow all virtualized applications to access the internet: Allows applications running in Sandbox to access the internet. Disabling this option stops applications from accessing the internet in Sandbox.
   3. Save trusted downloaded files outside the sandbox: When using a web browser in Sandbox, files that you download are saved to your Windows device, outside of the Sandbox environment. When enabled, this option allows you to keep the downloaded files after closing the Sandbox window. Disabling this option results in downloaded files being automatically deleted when you close the Sandbox session.

The settings are configured according to your preferences.

Updated on: 28/08/2025