cyber.hendryadrian.com
Security News · thehackernews.com

Google Adds 24-Hour Delay for Android Sideloading From Unverified Developers

· Original article ↗

Summary

Google announced a 24-hour wait and biometric or PIN confirmation before sideloading apps from unverified developers. It also plans free limited distribution accounts for sharing apps with up to 20 devices.

Key points

  • Google's advanced flow requires users to enable developer mode, confirm they are acting voluntarily, restart and re-authenticate, then wait 24 hours and confirm with biometrics or a device PIN.
  • After the process, users can install apps from unverified developers indefinitely or for seven days; the flow does not apply to installs via Android Debug Bridge (ADB).
  • Google says developer verification is intended to help flag bad actors and prevent malware distribution; it also cites scam scenarios in which users are tricked into disabling Play Protect.
  • Google plans free limited distribution accounts for hobbyists and students to share apps with up to 20 devices without government ID or a registration fee.
  • The advanced flow and limited distribution accounts are expected in August 2026, before the new developer verification requirements take effect the following month.
  • More than 50 developers and marketplaces, including F-Droid, Brave, the EFF, Proton, and The Tor Project, have raised concerns about privacy, surveillance, and access barriers.

Article Details

Event Type
Google announced Android sideloading safeguards, including a 24-hour waiting period and one-time confirmation for installing apps from unverified developers.
Impact
The advanced flow is intended to make scam-driven sideloading and malware distribution harder while preserving the ability to install unverified apps. It requires users to enable developer mode, confirm their intent, restart and re-authenticate, wait 24 hours, then confirm with biometrics or a device PIN. The flow does not apply to installs via Android Debug Bridge (ADB). Google said the advanced flow and free limited distribution accounts for hobbyists and students would be available in August 2026; the new developer verification requirements are scheduled to take effect the following month. More than 50 developers and marketplaces raised concerns about privacy, surveillance, and barriers to access. The announcement coincides with reports of Perseus targeting users in Turkey and Italy for device takeover and financial fraud.

People

Sameer SamatAndroid Ecosystem President quoted explaining Google's rationale for the 24-hour waiting period.

Malware

Perseusdistribution accounts for hobbyists, and arrives amid the emergence of new Android threats such as Perseus targeting users in Turkey and Italy.

Vendors

GoogleGoogle announced an advanced sideloading flow that enforces a mandatory 24-hour wait and a one-time confirmation process before installing apps from unverified developers to reduce scams and malware while preserving

Products

Androidmandate and free limited distribution accounts for hobbyists, and arrives amid the emergence of new Android threats such as Perseus targeting users in Turkey and Italy.Android Debug BridgeIt’s worth noting that the aforementioned process does not apply to installs via the Android Debug Bridge (ADB).Play Protectusers who sideload such apps into granting them elevated privileges that make it possible to turn off Play Protect, the anti-malware feature built into all Google-certified Android devices.

Countries

Italyand arrives amid the emergence of new Android threats such as Perseus targeting users in Turkey and Italy.Turkeyfor hobbyists, and arrives amid the emergence of new Android threats such as Perseus targeting users in Turkey and Italy.

Related Articles