Google begins enforcing verification requirements for app developers in four countries, signalling a potential shift towards stricter controls on app sideloading, with wider rollout planned for 2027.
Google has begun enforcing new Android developer verification rules in four countries, marking the first stage of a wider security overhaul that could reshape sideloading on certified devices. From 30 September, apps distributed in Brazil, Indonesia, Singapore and Thailand through participating app stores must be tied to verified developers if they are to be installed on certified Android phones running Android 7 or later. Google says the change is intended to reduce malware, scams and impersonation, while preserving the ability to install software from outside the Play Store.
The policy applies not only to Google Play, but also to several major third-party marketplaces, including Galaxy Store, HONOR App Market, OPPO App Market, Xiaomi GetApps, vivo V-Appstore and Transsion’s Palm Store, according to Google’s support documentation and developer console guidance. Developers who have not completed verification will find their apps blocked from new installs on certified devices in the countries covered by the first wave.
Google is not removing sideloading altogether. Instead, it has introduced what it describes as an advanced flow for unverified apps, but the process is deliberately cumbersome. Users must switch on the setting in Developer Options, complete authentication, restart the device and then wait 24 hours before proceeding. Once enabled, the bypass can be granted for seven days or indefinitely. Android Debug Bridge installations are exempt from the waiting period, which preserves a route for more technical users.
The company argues that the extra steps are designed to interrupt coercion scams, in which victims are pressured into installing malicious software quickly. That rationale has not persuaded many Android enthusiasts. In an Android Authority poll earlier this year, most respondents said the approach was either excessive or made Android feel less open, underlining the tension between platform security and the traditional appeal of sideloading.
For users in the United States, nothing changes yet. But Google has said the programme will expand globally in 2027, making the current rollout a test case for how far the company is willing to go in restricting unverified app distribution on Android. The first wave therefore offers an early look at a broader shift: not the end of sideloading, but a more tightly controlled version of it.
Disclaimer: This content is intended for informational purposes only. Readers are advised to exercise their own judgement, conduct due diligence, or consult a qualified expert before acting on any information provided.
