[ComputerGuru]

That sounds great, but how many other virtual machines are you using, what is your heuristic for deciding what task is run in which virtual machine, and how strict are you about which sensitive data is used on multiple VMs?

(note: genuinely curious. I've gone down this route before myself before realizing there was simply too much overlap between my "sensitive" and "normal" work. I still employ similar configurations but for protection against data corruption, ease of system administration, and R&D purposes only.)

[MichaelGG]

Right now, just games/junk browsing, home (personal email, browsing, projects), work (per customer). On Windows I use Sandboxie to further isolate things like browsers.

It's not perfect, but at least when a client wants me to run some damn .exe to join their oh-so-great screen-sharing platform, my home environment isn't messed up. And I can run random games or utilities and quickly revert to a snapshot.

The most sensitive keys stay in the host partition.