Google introduces new Android sideloading restrictions

Google has initiated a rollout of new security restrictions for Android sideloading, targeting the installation of APK files from unverified developers. The pilot program began on September 30, 2026, in Brazil, Indonesia, Singapore, and Thailand.

Under the new Android Developer Verification Program, the system checks if an app’s package name and signing key are registered with a verified developer. If the developer is unverified, the installation process becomes significantly more complex. Users must enable Developer Options, authenticate their identity, and restart their device. Most notably, a mandatory 24-hour waiting period is imposed before the user can complete the installation via biometric or PIN authentication.

Google states this friction is designed to combat social engineering and fraud by breaking the sense of urgency used by scammers to guide victims through malicious installations. While sideloading is not being eliminated, the process is no longer immediate for unverified sources. The policy affects certified devices running Android 7 or newer. A broader global expansion of this verification system is planned for 2027.