Google Tightens Android App Security with Developer Verification

Google has introduced changes to its Android app distribution policy, making it harder for users to sideload apps directly from websites. Starting in September 2026, certified Android devices will require developer verification before installing apps. This change affects mainstream certified hardware and is initially rolled out in Brazil, Indonesia, Singapore, and Thailand.

The new policy ties apps to a verified developer, with the goal of linking the app's package and signing identity to the person or organization distributing it. Developers can register for a full-distribution Android Developer Console account for $25 and complete identity verification. This change is intended to increase security by reducing malware distribution through sideloaded sources.

However, Google has left an escape hatch for users who want to install software from unverified developers. The advanced flow allows users to enable the installation of apps from unknown sources after a one-time 24-hour delay and subsequent authentication. This extra friction is designed to make coercion scams harder to carry out in real time.