For many years, sideloading in the Android operating system has stood out as a method that users can directly control. Anyone who found the application file (APK) and allowed unknown sources in the device settings could install any application they wanted from outside Google Play. However, Google announced in August 2025 that it would add new security steps to this process. Now, in order to do sideloading, new conditions such as developer verification will need to be met.
Google has launched an early access verification program for developers offering apps outside of the Play Store. This verification process aims to increase the security of applications and prevent the spread of malware. However, an important change is also on the agenda on the user side. Google plans to open sideloading to an audience defined as “experienced users” only. This group includes developers, users with high technical knowledge, and individuals who can understand and accept potential security risks.
Google continues to collect feedback
Android Application Security Product Management Director Matthew Forsythe stated that the new verification flow is designed to enable users to make informed decisions. “We are building an advanced process for users to understand the risks involved when installing unverified software. This structure also aims to prevent people under fraud pressure from bypassing security warnings,” Forsythe said. Accordingly, the new system will clearly warn users and tell them what kind of risk they are facing, but the final decision will be left to the user.
Google calls this verification system “advanced flow” and continues to collect feedback on the structure, which is still under development. According to the company’s plan, the developer verification requirement will first be implemented in countries such as Brazil, Indonesia, Singapore and Thailand in 2026. It is then expected to be expanded to cover more countries within the same year.
Although the new system aims to provide a more controlled environment in terms of security, this step also brings with it some discussions regarding Android’s open ecosystem. Independent developers feel that such verification processes may restrict alternative app distribution channels. On the other hand, security experts are of the opinion that such measures are necessary to reduce the spread of malware. For users, the process requires a balance between technical knowledge and willingness to take risks. Google aims to achieve this balance with the new system.