Update (October 1, 2026): These rules are now in effect. For a plain-English guide to what is enforced today, who is affected and how the new advanced flow works step by step, read Android’s New App Install Rules Are Live: What Changes for You.
Starting September 30, Android phones in Brazil, Indonesia, Singapore and Thailand will begin requiring apps to come from a verified developer. This applies even when those apps are installed outside the Google Play Store. The rule covers certified Android devices running Android 7 or later. It applies across seven participating app stores: Google Play, HONOR App Market, OPPO App Market, Galaxy Store, Palm Store, V-Appstore and GetApps. Google has confirmed the same requirement will expand globally in 2027, which puts the US and India on a longer runway than these four countries.
What actually changes for a reader
Sideloading, installing an app from outside an official store, is not being blocked outright. Google is building what it calls an “Advanced Flow” for people who still want that option. According to Google’s own developer blog, this flow “includes security checkpoints to resist coercion scams, while allowing power users to maintain the ability to sideload apps from unverified developers.” In plain terms, downloading an app from an unverified developer becomes a deliberate extra step. It does not disappear entirely.
Google’s stated goal is to make it harder for scammers to pose as legitimate developers. The company wants to stop malware pushed through direct downloads or lesser-known stores, a route Play Protect’s on-device scanning cannot fully cover. The tradeoff is real, though: a legitimate small developer or hobbyist project without a registered identity could get caught by the same gate a scam app hits.
Google has already opened a path for that group. Since August, students, hobbyists and learners have been able to register as “limited distribution” developers. That lets them share an app with up to 20 devices without a government-issued ID or a registration fee.
The timeline so far
- August 2026: Developer verification APIs, limited distribution accounts, and the power-user Advanced Flow all became available.
- September 30, 2026: Verification becomes required in Brazil, Indonesia, Singapore and Thailand, across the seven participating stores.
- 2027 and beyond: Global rollout to all certified Android devices, following what Google describes as partner and community feedback from the first phase.
Google’s own page does not list every operational detail yet, including exactly how the Advanced Flow will be gated for everyday users. Anyone outside the four launch countries has time before this reaches their device. But the direction is set: verified identity becomes a standard part of installing an Android app, whichever store it comes from.
