In a significant move to enhance security on its platform, Google has announced that starting in 2026, only applications from verified developers will be permitted for installation on certified Android devices. This initiative aims to address the growing concerns surrounding malware and financial scams that have plagued users.
New Verification Requirements
The new requirement specifically targets “certified Android devices” equipped with Play Protect and preloaded with Google applications. While the Play Store introduced similar measures in 2023, Google is now extending this mandate to encompass all installation methods, including third-party app stores and sideloading, where users download APK files from external sources.
“Think of it like an ID check at the airport, which confirms a traveler’s identity but is separate from the security screening of their bags; we will be confirming who the developer is, not reviewing the content of their app or where it came from,” a Google spokesperson explained.
This initiative is designed to thwart the proliferation of “convincing fake apps” and to complicate the efforts of malicious actors who attempt to distribute harmful applications swiftly after one has been removed. A recent analysis by Google revealed that there is a staggering “over 50 times more malware from internet-sideloaded sources than on apps available through Google Play.”
Importantly, Google assures developers that they will maintain the freedom to distribute their applications directly to users through sideloading or any preferred app store. To facilitate this transition, Google is launching a new Android Developer Console tailored for those who distribute applications outside of Google Play. Notably, students and hobbyists will have a distinct workflow compared to commercial developers.
For those already distributing via Google Play, it is likely that they have already met the verification requirements through the existing Play Console process, which necessitates a D-U-N-S number for organizations.
The verification process will commence in October for select Android app developers, with a broader rollout planned for March 2026. The requirement will initially take effect in September 2026 for users in Brazil, Indonesia, Singapore, and Thailand—regions notably affected by fraudulent app scams. Following this phased approach, the verification will be implemented globally in 2027.
“At this point, any app installed on a certified Android device in these regions must be registered by a verified developer,” Google stated.
Google has received positive initial feedback from various government authorities and stakeholders:
- Indonesia’s Ministry of Communications and Digital Affairs commended the initiative for providing a “balanced approach” that safeguards users while maintaining the openness of Android.
- Thailand’s Ministry of Digital Economy and Society deemed it a “positive and proactive measure” that aligns with their national digital safety policies.
- The Brazilian Federation of Banks (FEBRABAN) recognized it as a “significant advancement in protecting users and encouraging accountability.”
