Android’s New Sideloading Rules: What Changed on 30 September

Android's New Sideloading Rules: What Changed on 30 September

Quick answer: Since 30 September 2026, certified Android phones in Brazil, Indonesia, Singapore and Thailand only install apps from developers who have registered and verified their identity with Google, unless you use a slower “advanced flow”. Google plans to extend this worldwide in 2027. If you live elsewhere, including India and the US, nothing changes for you yet.

For years, one of Android’s selling points was that you could install an app file (an APK) from almost anywhere. That’s called sideloading. Google’s new developer verification rules don’t ban it, but they add a check: the person or company behind the app has to be known to Google.

Here’s what changed, why Google says it’s doing this, and what it means if you install apps from outside the Play Store.

What is Android developer verification?

It’s a requirement that apps installed on certified Android devices come from a developer who has registered with Google and verified who they are. It applies to apps no matter where you download them, not just to the Play Store.

Google’s developer documentation describes three situations:

  • Apps from verified developers: “Nothing changes from today’s experience.” You install them as usual.
  • Limited distribution: students and hobbyists can share an app with up to 20 devices without full identity verification. You accept an invitation to install from a developer you know.
  • Apps from unregistered developers: you can still install them, but only through the “advanced flow”, which adds extra steps and a waiting period.

Developers who already went through Google’s Play Console verification are treated as verified automatically, Android Authority reports. That means the vast majority of popular apps aren’t affected.

Who is affected right now?

As of 30 September 2026, enforcement covers users in four countries: Brazil, Indonesia, Singapore and Thailand. According to Android Authority, it applies to certified Android devices running Android 7 or newer.

Advertisement

The rule also covers several big app stores, not just Google Play. Google lists Google Play, Samsung’s Galaxy Store, HONOR App Market, OPPO App Market, Xiaomi GetApps, vivo V-Appstore and Transsion’s Palm Store as participating stores.

Google says it will expand to all certified Android devices worldwide in 2027. It hasn’t given a country-by-country date for India or the US yet. For now, Android Authority notes, US users see no changes.

How does the advanced flow work?

If you want to install an app from a developer who hasn’t registered, the advanced flow is how you do it. As described by Android Authority, the steps are:

  1. Turn on the relevant option in Developer options.
  2. Authenticate (with your PIN, fingerprint or face recognition).
  3. Restart your phone.
  4. Wait 24 hours.
  5. Choose whether to allow installs from unverified developers for seven days or indefinitely.

Installing apps through ADB, the command-line tool developers use from a computer, isn’t subject to that waiting period, Android Authority reports. That’s useful for technical users but not something most people will bother with.

Why the 24-hour wait?

The delay targets a specific kind of scam. Fraudsters often phone a victim, pretend to be a bank or government official, and talk them into installing a “security” app that’s actually malware. Google’s documentation says the advanced flow is designed to give “critical time and space needed to break the cycle of potential coercion”. A scammer is far less likely to keep someone on the phone for a full day.

Why is Google doing this?

Google’s main argument is malware. Android Authority quotes Google saying that “malware is over 90 times more common in sideloaded apps compared to those on the Play Store.” Tying apps to a verified identity makes it harder for bad actors to release harmful apps anonymously, then just reappear under a new name when they’re caught, Help Net Security explains.

Not everyone is happy. Many Android fans see this as Google tightening control over a platform that was meant to be open. In an Android Authority reader poll, 82% of respondents said the approach was excessive or went against Android’s open philosophy. Developers of free, open-source apps, often distributed through alternative stores, have raised similar concerns.

What should you do?

It depends on where you live and how you use your phone.

Advertisement
  • If you only install apps from the Play Store or your phone maker’s store: you don’t need to do anything. Your apps come from verified developers.
  • If you’re in Brazil, Indonesia, Singapore or Thailand and sideload apps: check whether the developer has registered. If not, plan ahead for the 24-hour advanced flow.
  • If you’re elsewhere, including India: nothing changes yet. Expect the same rules sometime in 2027 as Google expands worldwide.
  • If someone on the phone asks you to install an app: hang up. That’s true today with or without the new rules.

How to tell if an app is safe to sideload

Verification tells you who made an app, not whether it’s good. Before installing any APK, wherever you live, run through a few checks:

  • Download it only from the developer’s official website or a store you trust, never from a link sent in a chat or SMS.
  • Keep Google Play Protect switched on so it can scan apps you install.
  • Be suspicious of apps that ask for Accessibility access, SMS access or permission to install other apps without a clear reason.
  • Check the app’s reviews and community discussion before trusting it with your data.

If you rely on a niche app from outside the Play Store, it’s worth contacting its developer now to ask whether they plan to register before the global rollout.

Android owners are also getting used to Gemini replacing Google Assistant this autumn. You can find more coverage in our Tech News section.

Frequently asked questions

Is Google banning sideloading on Android?

No. You can still install apps from outside the Play Store. Apps from verified developers install normally, and apps from unregistered developers need the advanced flow, which includes a one-time 24-hour wait.

When will developer verification start in India?

Google hasn’t given a date for India. As of October 2026, it says the requirement will expand to all certified Android devices worldwide in 2027.

Does this affect apps I’ve already installed?

Google’s announcements focus on installing apps. Sources so far don’t say existing apps will be removed. If an app you depend on came from outside the Play Store, keep an eye on updates from its developer.

What is a certified Android device?

It’s a phone or tablet that has passed Google’s compatibility tests and ships with Google apps such as the Play Store. Most phones sold by major brands are certified.

Sources

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top