Google Tightens Android App Security with New Verification Process

Google has started enforcing new developer verification rules on Android, making it harder for users to install apps from unverified sources. The changes took effect on September 30 in Brazil, Indonesia, Singapore, and Thailand, applying to certified devices running Android 7 or later. The initial rollout covers apps from seven major app stores, including Google Play, Samsung’s Galaxy Store, and others.

Under the new system, apps must be registered to a developer verified by Google. Apps from verified developers can be installed normally, while those from unverified developers require users to go through an Advanced Flow. This process involves enabling settings in Android’s Developer options, completing extra security steps, and waiting 24 hours before installation.

The waiting period is designed to thwart scams where fraudsters pressure victims into immediate security changes during live calls. Google aims to reduce malware distribution and prevent apps from changing ownership or behavior without user knowledge. The changes do not ban sideloading but add significant barriers in affected markets.

Google plans to expand the developer verification system globally by 2027, with further refinements based on feedback. The full impact on direct web downloads of APK files remains unclear as the rollout progresses.