Google is tightening security for Android users by introducing a mandatory verification step for apps installed outside the Play Store. This change affects anyone who relies on sideloading applications from unknown sources, adding friction to the installation process. The update aims to reduce the risk of malware while giving users a clear, albeit slower, path to installing unverified software.
Users must enable Developer Options and wait a full day before installing apps from unknown sources
The company calls this new mechanism the 'advanced flow,' which was detailed by Mishaal Rahman, Google’s Community Engagement Manager. According to Rahman, the rollout begins with this specific verification process for apps from unverified developers. The policy shifts the burden of proof to the user, requiring explicit confirmation before an app can run.
To complete the advanced flow, users must enable Developer Options on their device and authenticate using their screen lock. After authentication, the system enforces a 24-hour waiting period before the app can be installed. If a user accidentally disables Developer Options during this process, they have a 10-minute window to re-enable it without triggering the restart and wait cycle again.
This policy applies first to Brazil, Indonesia, Singapore, and Thailand starting September 30. Google plans to extend these enforcement rules to all global regions by 2027. The only method to bypass this advanced flow remains the use of Android Debug Bridge (ADB) commands. Updates to previously sideloaded apps will also require this verification if the developer options setting is disabled.
We tracked this policy shift as it represents a significant change to how Android handles app security. The implementation prioritizes user safety over the convenience of direct app installation. Users in the initial four regions should prepare for the 24-hour delay when installing apps from outside the Play Store.
Source: Google, NotebookCheck
