While Google has plans to severely restrict Android users’ ability to download apps from sources other than the Google Play Store, the company is introducing a new process that will allow sideloading after a mandatory 24-hour waiting period. This new “advanced flow” setting is meant to prevent users from installing malware distributed by bad actors through unverified sources, while still allowing them to sideload from legitimate developers.
Sideloading restrictions are coming to Android
Last year, Google announced that sideloading on Android would eventually be limited to verified third-party app stores and developers. This change has a clear goal: cracking down on malicious apps impersonating real ones found on the Google Play Store. These restrictions—which go into effect for Brazil, Indonesia, Singapore, and Thailand later this year, and apply globally in 2027—will eventually require developers to register specific details with Google in order to distribute their apps, as well as pay a fee. (Students and hobbyists will be still able to share apps with up to 20 devices without registering or requiring users to go through the new workaround.)
This move was met with significant criticism from both developers and users, with concerns ranging from privacy infringement (developers now need to share details they didn’t previously have to) to increased difficulty accessing modified or downgraded versions of apps. As such, Google is rolling out a compromise it feels will protect most users from malware, while allowing power users to sideload when they wish to.
Google is introducing a sideloading workaround
The new advanced flow setting will add multiple points of friction to unverified app installation, cutting into the sense of urgency scammers frequently use to distribute malware. Users will go through a one-time process to disable security protections—meaning you won’t need to repeat it every time you want to sideload—but you’ll still see a warning when you attempt to install an app from an unverified developer.
If you’re interested in this workaround, you will first need to enable developer mode in your device’s Settings app and confirm you are not being coerced into disabling security protections on your device (a common scam tactic). Next, you’ll need to restart your phone, which shuts down calls and remote access tools scammers may use to communicate with you or control your device. From here, you’ll have to wait 24 hours before you can return and authenticate the settings change using biometrics or your device PIN. Finally, you’ll confirm you understand the risks, which then allows you to install apps from unverified developers for seven days, or indefinitely.
This workaround will be available starting in August—before developer registration requirements kick in.
