Android developer verification is no longer an upcoming change. It went live on September 30 in Brazil, Indonesia, Singapore and Thailand. Phones there now block installs of apps from unregistered developers through seven big app stores. Google says it will expand the rule worldwide in 2027.
What is Android developer verification, in plain words?
A verified developer is one who has confirmed their identity with Google and registered their app. If a developer has not done that, Google treats the app as unregistered. In the four countries above, installs of unregistered apps through the participating stores are now stopped. The rule applies to certified Android devices, meaning phones that ship with Google Play services. That covers most Android phones sold outside China. Android Authority reports that the requirement starts at Android 7 and newer.
We covered the policy and its timeline in detail before it took effect, in our earlier explainer on the September 30 deadline. This post is about what is actually enforced now.
Which app stores enforce it today?
- Google Play
- Galaxy Store (Samsung)
- GetApps (Xiaomi)
- OPPO App Market
- V-Appstore (vivo)
- HONOR App Market
- Palm Store (Transsion)
Google’s developer verification FAQ says the September 30 deadline applies only to these participating stores. Sideloading means installing an app from outside an app store, usually an APK file from a website. An APK is simply the installer file for an Android app. Say a user sideloads an app directly, or gets it from a store that is not on the list. Google’s FAQ says the new verification requirements do not apply to that app yet. Google also limits this first phase to phones and tablets.
Does this affect me?
- Today: only users in Brazil, Indonesia, Singapore and Thailand, and only through the seven stores above.
- The US, India and everywhere else: Google says the expansion to all apps on certified devices comes in 2027.
- If you only install from Google Play: Google says the installing experience stays exactly the same for the vast majority of users.
- Play developers: Google says over 99% of their apps are already registered.
How do I install an app from an unverified developer now?
Google’s workaround is called the advanced flow. It rolled out globally in August 2026, so it already exists on phones outside the four countries. These are the steps as Google’s FAQ describes them.
- Turn on developer mode in your system settings, the switch meant for app developers.
- Pass a quick check that confirms nobody is coaching you into turning off your security.
- Restart your phone and sign back in.
- Wait one day, then confirm it is really you with a fingerprint, face unlock or your PIN.
- Choose to allow installs from unverified developers for 7 days or indefinitely.
Google says the restart cuts off any remote access or active phone call a scammer might be using. The one-day wait happens once, not for every app. Google’s FAQ explains the delay this way:
Scammers rely on manufactured urgency, so this breaks their spell and gives you time to think.
Each install after that still shows a warning that the app comes from an unverified developer. You tap Install Anyway to continue. Installs done through ADB are not held up by the waiting period. ADB is a computer tool developers use to install apps over a USB cable. Google’s FAQ also notes that you can switch developer options back off once the flow is enabled. That matters, because some banking apps refuse to run while developer mode is on.
Will apps I already installed keep updating?
Here is the part worth knowing before you hit a wall. An app from an unregistered developer can only be installed or updated while the advanced flow is switched on. The other route is an ADB install from a computer. If you turn the advanced flow off, updates to those apps will fail.
Why is Google doing this?
Google’s argument is scam protection. Google says its own analysis found over 90 times more malware coming from sideloaded sources than from apps on Google Play. That figure is Google’s, not an independent measurement. We covered one sideloaded-malware case in our report on Android car head unit malware.
The threat is real, but so is the cost. A one-day wait plus a phone restart is heavy friction for a hobbyist tool or a small open-source app. Google’s FAQ also says skipping the wait is not supported at this point. Students and hobbyists do get a lighter path. Google offers free limited distribution accounts, which let a developer share an app with up to 20 devices without a government ID or a fee.
For now the practical advice is short. If you live outside those four countries, enforcement has not reached you yet, and Google’s timeline puts that in 2027. If you live inside them and install apps from small developers, learn the advanced flow before you need it.
Sources: Android Developers Blog (June 18), Android Developers Blog (March 30), Android developer verification FAQ, Android Authority
