cyber.hendryadrian.com
Security News · arstechnica.com

Google details free and paid Android developer verification, with no public developer list

· Original article ↗

Summary

Google says Android 16 will add verification for sideloaded apps, with a $25 paid tier and a free hobbyist/student option. Checks may require internet access, and Google says harmful apps could trigger deactivation across a developer’s apps.

Key points

  • The Android Developer Verifier is planned for the next major Android 16 release and will check app package names and signing keys against registrations with Google.
  • Verification may require internet access for apps outside a local cache. Google is considering a pre-auth token for alternative app stores, and the process may break F-Droid.
  • The paid verification tier will mirror Google Play’s $25 registration fee; hobbyists and students can register free by email, though the number of permitted installs is unclear.
  • Google says verification will target apps posing a high degree of harm, not enforce other Play Store rules. The article says it is unclear whether malware checks will happen during verification itself.
  • Android’s existing Play Protect scans sideloaded apps. Google says sideloaded apps identified as harmful could lead to all apps from that developer being deactivated.
  • Google says there will be no public list of sideload developers, but it will retain their identity information, which could be demanded by law enforcement or governments.

Article Details

Event Type
Google's planned Android developer verification system
Impact
Google says developers distributing apps outside its ecosystem will generally pay a $25 verification fee, while hobbyists and students can use a free tier with an unclear installation limit. Verification may require Internet access for apps not in a local cache, and Google says sideloaded apps identified as harmful could lead to all of that developer's apps being deactivated. The article raises concerns about developer privacy and possible future censorship; it says Google will not publish a list of sideload developers.

Vendors

GoogleAs we careen toward a future in which Google has final say over what apps you can run, the company has sought to assuage the community’s fears with a blog post and a casual “backstage” video.

Products

AndroidConfirming app verification status will be the job of a new system component called the Android Developer Verifier, which will be rolled out to devices in the next major release of Android 16.Android Developer VerifierConfirming app verification status will be the job of a new system component called the Android Developer Verifier, which will be rolled out to devices in the next major release of Android 16.F-DroidThis process may break the popular FOSS storefront F-Droid.Google PlayThe verification process will mirror the current Google Play registration fee of $25, which Google claims will go to cover administrative costs.ICEBlockThe current US administration has had harsh words for apps like ICEBlock, which it successfully pulled from the Apple App Store.Play ProtectPlay Protect scans all apps on your device, not just those from the Play Store.YouTube ReVancedBased on Google’s statements and publicly available policy information, it doesn’t look like developer verification would directly ban things like YouTube ReVanced and other ad-blockers.

Related Articles