Google is rolling out a new “advanced flow” for sideloading apps on Android that targets unverified developers and adds a mandatory one-day waiting period for users who want to bypass its new verification rules. The company says it wants to keep Android open to third-party app installs and, at the same time, reduce scams and malware that pressure people to quickly download harmful apps.
Soon, Android will require app developers to verify their apps for certified devices. This rule will apply even if users download apps from outside the Play Store.
To keep unverified sideloading possible, Google is adding an opt-in path for “power users” willing to take “educated risks.” Users first need to enable Developer options, then go into security settings and activate the option that lets them install apps from unverified developers, with clear warnings about fraud and device compromise risks.
After users start this process, Android enforces a 24-hour cooling-off period before they can finish activating the setting. At the end of that day-long wait, they must confirm the change again with biometric authentication or a PIN.
Credit: Android
Google says this delay helps stop scammers from coaching victims in real time. This happens when scammers guide victims over phone calls or remote sessions to quickly turn off security measures and install harmful apps.
Once this whole process is complete, users can choose to keep sideloading available for seven days or indefinitely. App installs from unverified developers still trigger high-visibility warnings, but users can proceed anyway. Google plans to roll out this change via Play Services this August, with the new developer verification requirements taking effect later.
