Hermit is the only Android browser with Sandboxes: completely separate Containers that let you use Multiple Profiles. With the Sandbox feature, you can:
This feature is available on Android 9 Pie and above. Most phones released in the last 3+ years are eligible.
This is a new feature in Hermit, currently available only via the Early Access Program. To use it, you need to subscribe to the Early Access Program in the app.
“Sandbox” is a computer science term for isolating a piece of software so that it can access only certain resources, programs, and files within a computer system. In the context of Web browsers, a sandbox can provide an isolated container for completely independent login sessions, all active at the same time.
Each Lite App can run in one of the following sandboxes provided by Hermit.
Picking a Sandbox for your newly-created Lite App is easy! Just pick a color from the Settings, and you’re good to go.
The Sandbox color will be prominently displayed next to the Lite App’s icon within Hermit.
Currently, there is no way to add a sticker to the Home Screen icon. An interesting work-around is to paste an emoji before or after the name of the Lite App before adding it to the home screen.
Each independent site is always isolated from every other site, in every browser including Hermit, even without the Sandbox feature. E.g. Instagram cannot read LinkedIn’s cookies, and vice versa, nor can either of them read Google’s cookies. This is a basic security measure that the entire Web depends on, and Hermit enforces that strictly.
But, as in other browsers, different sites may decide to share login credentials. E.g. when a site uses Login with Google / Facebook / Apple, they are allowed to have limited access to the account that you signed up with. Otherwise “Login with X” wouldn’t work at all!
In these cases, you will need to keep different Lite Apps in the same Sandbox. E.g. when using Google Login on another site, make sure to keep both the Lite Apps in the same Sandbox. As another example, Facebook and Instagram are from the same company, and if you want to use the same account for both, then you need to keep them both in the same Sandbox.
No, absolutely not. Just like every other browser, web sites in Hermit CANNOT access each others’ data.
Each web site has access only to its own cookies and its own storage, segregated by its domain name, because that’s how security works on the Web Platform (and has for the last 20+ years). A page from
facebook.com cannot access cookies set by another page at, say,
reddit.com in any browser.
Opening two Lite Apps in the same Sandbox is like opening two tabs or two windows in Chrome (or Firefox, or Brave, or any other browser).
facebook.com cannot access
reddit.com’s cookies, you cannot have two sets of cookies for
reddit.com active at the same time. That means you cannot log in to Facebook or Reddit using two accounts at the same time in the same Sandbox.
Opening two Lite Apps in different Sandboxes is like using two completely independent browsers on Android.
A third-party server is one that’s used by another web site, e.g. both Facebook and Reddit may use
some-ad-server.com. When placed in different Sandboxes, there is also complete separation of third-party cookies, which enhances your privacy even further.
Because of the way the Web works,
some-ad-server.com will always have access to its own data, no matter which window or tab or Lite App you are using, but limited to the Sandbox it is in.
To the best of our knowledge, no other browser currently supports Containers or Profiles on Android.
If you know of any other browser that supports Sandboxes on Android, we’d love to hear about it!
Sandbox is a brand new feature! We’d love to hear your thoughts about it.
Send Feedback through the app.