Google Adds Safeguards for Sideloading Unverified Android Apps
Summary
Google’s Advanced Flow adds a multi-step, one-time process for power users to sideload APKs from unverified developers. It is designed to disrupt scammer coaching and precedes developer identity verification planned for August 2026.
Key points
- Advanced Flow lets power users install APKs from unverified developers after completing a one-time setup.
- The setup requires enabling Developer Mode, confirming the user is not being coached, restarting and reauthenticating, waiting 24 hours, and giving final approval.
- Users can enable apps from unverified developers for a week or indefinitely, with Android displaying a warning.
- Google says the added friction is intended to disrupt scams that pressure victims to bypass security warnings or settings.
- Google plans to require app publishers to verify their identities in August 2026; unverified apps would be blocked on certified Android devices.
Article Details
- Event Type
- Google announced Advanced Flow, an Android mechanism for safer APK sideloading from unverified developers.
- Impact
- The one-time setup adds anti-coercion checks, a restart and reauthentication, a 24-hour wait, and final confirmation before users can enable installation from unverified developers. Google says the added friction is intended to disrupt scammer coaching and reduce malware risk while preserving sideloading for power users. Developer identity verification is planned for August 2026.