Short answer: VirtualBox itself is free for commercial use. The VirtualBox Extension Pack is not. The two are separate downloads under separate licences, and the trouble companies get into almost always comes from the second one being installed “because the tutorial said so”.
This guide explains exactly what is free, what the Extension Pack adds, how to find out whether it is installed on your machines, and how to remove it if you do not need it.
The two licences, side by side
| Component | Licence | Use at work |
|---|---|---|
| VirtualBox base package | Open source, GPL v3 | Free — install it on as many company machines as you like |
| VirtualBox Extension Pack | Oracle’s own licence (PUEL) | Free only for personal use and education; any use inside a business or organisation needs a paid licence from Oracle |
“Personal use” in Oracle’s terms means one person using it on their own computer for themselves. Using it on a company laptop, for work, is business use — even if nobody else touches it.
What the Extension Pack actually adds
Everything most people need from VirtualBox is in the free base package: snapshots, cloning, shared folders, clipboard and drag-and-drop, Guest Additions, NVMe controllers, headless mode and the full VBoxManage command line. The Extension Pack adds only a handful of features:
- USB 2.0 and 3.0 passthrough — USB 1.1 works without it
- The VirtualBox remote desktop server (VRDE)
- Host webcam passthrough
- AES encryption of virtual disk images
- Intel PXE network boot ROM
For a typical IT lab — test servers, a Windows update test machine, a Linux box — none of these matter. If a USB licence dongle or a scanner has to be visible inside the virtual machine at work, you do need the licence.
How to check whether the Extension Pack is installed
On any machine with VirtualBox, open a command prompt or terminal and run:
VBoxManage list extpacks
If the output says Extension Packs: 0, you are only running the free base package. If it lists an Oracle Extension Pack, it is installed. On Windows, VBoxManage.exe lives in the VirtualBox installation folder, usually C:Program FilesOracleVirtualBox.
To check a fleet, run the same command through your remote management tool or a login script and collect the output. It takes minutes and gives you a definite answer instead of a guess.
How to remove it
- Shut down any running virtual machines.
- Run
VBoxManage list extpacksand copy the exact pack name from the output. - Run
VBoxManage extpack uninstall "<that name>"as administrator (or root on Linux). - Run
VBoxManage list extpacksagain to confirm it shows 0.
Virtual machines keep working. If one was configured for USB 2.0 or 3.0, switch its USB controller to USB 1.1 or disable USB in its settings, otherwise it may refuse to start.
Free replacements for the Extension Pack features
| You need… | Free option |
|---|---|
| Remote access to a VM’s screen | Enable RDP or SSH inside the guest operating system itself, or use a remote support tool such as LiteManager Free |
| Encrypted virtual disks | Encrypt inside the guest (BitLocker, LUKS) or encrypt the host disk |
| Fast USB devices in a VM at work | Share the device over the network instead, or use a hypervisor without this licence question — Hyper-V on Windows, KVM on Linux |
| Network boot | Use one of the AMD PCnet adapter types, which can network-boot with the base package — the Extension Pack only adds the Intel boot ROM |
Why this is worth ten minutes of your time
The Extension Pack is a separate download from Oracle, and organisations have reported being contacted by Oracle about its use on company networks. The base package carries no such risk. The simplest policy for an IT department is:
- Allow the VirtualBox base package freely.
- Do not install the Extension Pack on company machines unless you have bought the licence.
- Check existing machines once with
VBoxManage list extpacks, remove it where it is not licensed, and write the rule down.
When VirtualBox is not the right answer at all
If you need virtual machines on servers rather than desktops, look at a bare-metal hypervisor. XCP-ng and Proxmox VE are free for production; the free vSphere Hypervisor is licensed for non-production use only. Our guide to free virtualization software explains which is which, and XCP-ng Center gives you a Windows console for XCP-ng hosts.
For desktop testing, VirtualBox without the Extension Pack remains one of the best free tools available.
FAQ
Is VirtualBox free for commercial use?
Yes, the base package is free under the GPL v3, including for business use. The Extension Pack is not.
Is the VirtualBox Extension Pack free?
Only for personal use and education. Any use inside a business or organisation requires a paid licence from Oracle.
Do I need the Extension Pack?
Only for USB 2.0/3.0 passthrough, the VirtualBox remote desktop server, webcam passthrough, disk encryption or Intel PXE boot. Everything else works without it.
How do I know if the Extension Pack is installed?
Run VBoxManage list extpacks. “Extension Packs: 0” means it is not installed.
Will my virtual machines stop working if I remove it?
No. Only machines set to USB 2.0 or 3.0 need their USB controller switched to USB 1.1 or disabled.
Are Guest Additions part of the Extension Pack?
No. Guest Additions come with the free base package and are covered by its licence.
