Google introduces developer verification for Android APK sideloading

Google has begun implementing a new developer verification system for Android that introduces additional barriers to sideloading APK files. This measure aims to enhance security by linking an application's package name and signature key to a verified developer identity, intended to reduce the prevalence of malicious software distributed outside the official Google Play Store.

The initial rollout, which began on September 30, was targeted at pilot markets including Brazil, Indonesia, Singapore, and Thailand. However, the implementation has been more limited than originally anticipated. Rather than a blanket restriction on all external APKs, Google has softened the scope to focus on apps distributed through specific third-party stores, such as the Galaxy Store and Oppo App Market.

For unverified developers, the installation process is expected to become significantly more complex, potentially requiring users to enable developer settings, acknowledge multiple warnings, and undergo a 24-hour waiting period before an app can be installed via PIN or fingerprint authentication.