Google Introduces 24-Hour Cooling-Period For Unverified Android Sideloading
Google has unveiled a mandatory "Advanced Flow" requiring users who wish to sideload unverified Android apps for at least one full day before installation. This new measure is designed as an interim safety step while the company prepares its broader developer verification program, which will begin restricting third-party app installs starting in September 2026 and aiming by mid-September this year if not delayed further due to antitrust settlement issues with Apple Inc..
Key Points
-
1Google has introduced a mandatory 24-hour waiting period and reboot requirement for installing unverified apps on Android as part of its new security measures.
-
2This 'advanced flow' is designed to balance openness with safety by preventing the immediate installation of applications from developers who have not yet been verified through Google's program.
-
3The changes are set to roll out starting in September 2026, following an initial announcement that unverified apps would no longer be installable later this year.
Developments
Following recent attacks involving impersonated developers that spread over 50 times as much malicious software via sideloaded apps than through Google Play, engineers are introducing developer verification for certified devices. Starting next year in select countries affected by these scams, Android will require all installed applications to be registered with verified identities before installation is permitted on those specific hardware platforms.