Google has initiated the rollout of its new advanced flow for installing applications from unverified developers, a significant shift in the Android ecosystem. This process, which was first announced in March, introduces a series of steps that users must navigate to sideload apps, complete with a mandatory 24-hour waiting period. The rollout is particularly timely, as it precedes the enforcement of developer verification, set to commence on September 30 in select countries.
Understanding the New Sideloading Process
According to Mishaal Rahman, Google’s Android Community Engagement Manager, the advanced flow is being implemented gradually, meaning that not all users will see the new settings immediately. The process is intentionally designed to be cumbersome, aiming to deter potential scams associated with malicious applications. Here’s how it works:
- Access Developer Options and select Apps from unverified developers.
- Enable the option to Allow apps from unverified developers.
- Authenticate using your screen lock.
- Confirm that you are not being pressured to make this change.
- Restart your device and wait for 24 hours.
- Return to the settings to choose whether to allow apps from unverified developers for a period of seven days or indefinitely.
Even after following these steps, users will encounter a warning when attempting to install an unverified app, though they will have the option to proceed with the installation regardless. This added friction is a deliberate feature, designed to protect users from scams.
In addition to the installation process, the new flow also applies to updates for apps from unregistered developers. If users disable the flow, they will be unable to receive updates for these apps until they re-enable the feature. However, those familiar with Android Debug Bridge (ADB) can still install or update apps without going through the advanced flow, as ADB remains exempt from these new requirements.
The rollout includes a new Android Developer Verifier service, which users can install manually from Google Play to potentially expedite the appearance of the advanced flow on their devices. Enforcement of developer verification will initially cover apps distributed through various platforms, including Google Play, HONOR App Market, and others, before expanding to all regions and app installations by 2027.
Reactions to these changes have been mixed. A recent poll indicated that a significant majority of respondents felt the new rules undermine Android’s openness, with many expressing concerns about the additional barriers to accessing apps. Commenters on Google’s announcement have echoed these sentiments, questioning the necessity of the extra steps and the implications for updates to already-installed unregistered apps.
In response to these concerns, Rahman has emphasized the importance of the new measures, explaining that an app installed prior to the verification process could later receive a harmful update. He clarified that the focus is not on the source of the APK but rather on whether the developer is registered with Google.
