Apps in Windows Phone run in a sandboxed environment. This means every application on Windows Phone runs in its own chamber. Applications are isolated from each other and cannot access the data of other applications. If any app needs to save information to the device, it can do so using the isolated storage, which is restricted from access by other applications. Also, the third-party applications installed on Windows Phone cannot run in the background; that is, when the user switches to a different application, the previously used application is shut down (although the application state is preserved). This ensures that the application cannot perform activities such as communicating over the internet when the user is not using the application. These restrictions also make Windows Phone less susceptible to malware, but you should never assume that any device is safe. It is just more challenging for malware to function on these devices.

So far, we have had a look at the four types of security chambers and we now know that Windows Phone 8 uses BitLocker technology for encryption. We have learned about the different capabilities granted during the installation of an application and saw how every application is isolated from each other. Next, we'll look at an important aspect of Windows Phones, which is its filesystem.