In a bid to enhance security and combat the rising tide of scams and malware, Google is unveiling a new safeguard for Android users that introduces a mandatory 24-hour waiting period for sideloading apps from unverified developers. This initiative, part of an “advanced flow for sideloading,” comes months after the company reconsidered its earlier stance of requiring all app installations on certified Android devices to originate from verified developers.
Back in November, Google hinted at the development of this advanced flow, which aims to empower experienced users to accept the risks associated with installing unverified software. Recently, the company reiterated its commitment to sideloading, stating, “Sideloading is here to stay.” However, the new measures have sparked some controversy, with critics arguing that the restrictions may be excessive.
Details of the New Sideloading Process
Google has released a video outlining the steps users must follow to sideload unverified apps. The process begins with enabling developer mode in the system settings, which allows installations from unverified sources. Users will then encounter a prompt asking, “Is someone asking you to do this?” This warning serves to alert users about potential scams, such as hackers masquerading as legitimate app developers.
Should users choose to proceed, they will need to restart their Android devices to mitigate the risk of coercion from malicious actors. The final hurdle involves a one-time 24-hour “security delay” before any apps from unverified developers can be installed. Google explains that this waiting period is designed to counteract the urgency often exploited by scammers, allowing users time to think critically about their decisions.
In a statement to PCMag, Google clarified that this 24-hour delay applies solely to apps from unverified developers, while installations from verified developers will remain unaffected. The company emphasized that all developers on Google Play have already undergone a verification process.
Despite these reassurances, the new protocol has drawn criticism from various corners. Some industry professionals argue that the delay serves as a barrier to user choice, with one software developer noting that scammers often follow up the next day. Others have expressed concerns that the restrictions could deter users from exploring open-source applications outside the Google Play Store.
In defense of the measures, Google’s Android team has taken to social media to articulate the necessity of maintaining a balance between openness and safety. Sameer Samat, Google’s President for the Android ecosystem, highlighted the importance of protecting the platform’s vast user base, which exceeds three billion individuals, many of whom are targets for malicious activities.
The advanced flow for sideloading is expected to roll out in August, initially targeting users in Brazil, Indonesia, Singapore, and Thailand, with plans for a broader global implementation in 2027 and beyond. Meanwhile, the free Android store F-Droid has voiced its opposition to the verification requirements, labeling them as “corporate surveillance.” They argue that individual developers should not be compelled to submit personal identification or pay a fee to distribute their software.
In response to some of the backlash, Google is also preparing to offer free, limited distribution accounts for students and hobbyists, enabling them to share Android apps with a small group of up to 20 devices without the need for government-issued identification or registration fees.
