VirtualBox is free - mostly. One specific download, the Extension Pack, carries a licence that makes it free at home and a paid product at work, and Oracle is known for checking. This page separates the three downloads people confuse, states the rule plainly, and explains why many users no longer need the pack at all.
Search the internet and you will find two confident claims - VirtualBox is completely free, and Oracle will bill your company for VirtualBox. Both are half of one truth. VirtualBox is three separate downloads under different licences, and only one of them is the trap. If your office uses VirtualBox, this is the most important page in this series - and it ends with good news: on current versions, most people can simply not install the risky one.
Under the PUEL as Oracle publishes it, using the Extension Pack to run a business, organisation or institution is outside the free licence - that use requires Oracle's paid Extension Pack Enterprise licence, sold per socket or per named user. "We only use it a little" and "we are a small company" are not categories the licence offers. Oracle's exact wording and prices change over time, so read the current licence on virtualbox.org before relying on any summary - including this one - but the shape of the rule has been stable for years: home free, work paid.
One more caution that recent licence changes underline: do not assume a leisurely free evaluation period for business use. Oracle has tightened the PUEL terms around downloads for the 7.1-and-later line, so an office should decide before installing the pack, not after an email arrives.
This is not a theoretical licence nobody reads. Oracle actively tracks Extension Pack downloads and contacts organisations about licensing - it is one of the best-known compliance stories in IT. The emails surprise people precisely because "VirtualBox is free" is so widely believed. The protection is simple and costs nothing: know which of the three downloads is on your machines. An office can run the base package and Guest Additions on a thousand PCs with a completely clear conscience - it is the pack that must be licensed, removed, or never installed.
Here is what changed and why this page can end cheerfully. The Extension Pack used to hold must-have features, which is why everyone installed it reflexively. Across the 7.x line Oracle moved the big ones into the free base package - USB 2.0 and 3.0 controllers arrived in the base with 7.0, and later 7.2 releases moved more (including NVMe support) the same way. What remains pack-only on current versions is a short list - principally things like the PXE boot ROM and Oracle Cloud integration - which a typical home or office VM user never touches.
So the practical advice writes itself: skip the Extension Pack unless you can name the specific feature you need from it. If you cannot name one, you do not need it, and the licence question never arises.
Not sure whether the pack is on your machine? In VirtualBox Manager open File and then Preferences and then Extensions - anything listed there is installed. From the command line, VBoxManage list extpacks reports the same. If your office decides it does not need the pack, remove it from that same Extensions page.
And if you do install it - at home, or licensed at work - its version must match your VirtualBox version exactly; the downloads page offers the pack build for each specific release, and a mismatched pair is the most common cause of extension errors at startup.
The complete tutorial builds a working Windows VM using only the free base package and Guest Additions - proof no Extension Pack is required.
Watch Full VideoThe base package is - it is open source under the GPL, with no restriction on business use, and Guest Additions share that licence. What is not free for business is the separate Extension Pack, which is licensed under PUEL for personal and educational use only; companies need Oracle's paid Enterprise licence for that pack.
No. Clipboard sharing, drag and drop and shared folders come from Guest Additions, which is free. USB 2.0 and 3.0 controller support moved into the free base package in the 7.0 line. On current versions the Extension Pack mainly adds things like the PXE boot ROM and Oracle Cloud integration, which most users never need.
Open VirtualBox Manager, then File, Preferences, Extensions - installed packs are listed there and can be removed from the same screen. Or run VBoxManage list extpacks in a terminal or command prompt, which reports each pack and its version.