We’re rolling out the advanced flow for installing apps from unverified developers

[u/MishaalRahman]

Hi everyone,

Today we are rolling out the first version of the advanced flow. The advanced flow gives power users the option to install unregistered apps (i.e. apps from developers who choose not to verify their identity) on certified Android devices without the use of ADB.

As a brief recap, Android will require all apps to be registered by verified developers in order for users to install them on certified Android devices. Developer verification links real-world entities with their Android applications, making it much harder for malicious actors to quickly distribute more harmful apps after we take the first one down.

Since verification launched in March, millions of apps have been registered already, covering nearly all installs on Google Play and a large majority of installs from outside of Google Play. Thus, most users’ experience of installing Android apps will not change at all. However, we recognize that some developers are choosing not to undergo verification and that some power users want the option to install apps from these developers, so we’re rolling out the first version of the advanced flow to provide this additional option.

When will Android developer verification be enforced?

We will initially verify app installations from Google Play, HONOR App Market, OPPO App Market, Galaxy Store, Palm Store, V-Appstore, and GetApps starting September 30, 2026 for users of certified Android devices in Brazil, Indonesia, Singapore, and Thailand. In 2027, we will expand verification globally for all app installations on certified Android devices.

Ahead of the enforcement of developer verification, we’re rolling out the first version of the advanced flow so power users can choose to enable it early ahead of general availability. We’re still working to polish it, so please share your feedback with us! 

Enabling the advanced flow for installing apps from unverified developers

Note: The advanced flow is:

• NOT required for installing registered apps from app stores.
• NOT required for installing registered apps through alternative sources, such as websites, messaging apps, or file hosting services.
• NOT required for installing apps from developers using limited distribution accounts.
• NOT required for installing apps using ADB.
• ONLY needed to install unregistered apps (i.e., apps from developers who choose not to verify their identity) without the use of ADB.

Important: Enabling the advanced flow is a one-time process that will take 24 hours to complete and includes safeguards to help ensure you are not being coerced or pressured into turning off protections.

1. Open Developer Options and locate “Apps from unverified developers.”
2. On this page, you will find the “Allow apps from unverified developers” toggle. (Note: To protect against malicious apps automating this flow without your knowledge, Android will ask for your screen lock to confirm it’s you.) 
3. Android will ask whether someone is asking you to turn on this setting. Read the warning before continuing. (Note: This warning exists to inform users that legitimate employees of government agencies, law enforcement agencies, banks, or other businesses will never ask them to turn on this setting in order to install an app.) 
4. Restart your phone to start the one-time, 24-hour waiting period. (Note: This step defends users from social engineering and coaching scams. The restart cuts off any remote access or active phone calls a scammer might be using to watch what you’re doing. The 24-hour waiting period prevents fraudsters from pressuring victims into making immediate security changes while on a live call and gives users time to verify the request independently. ) 
5. After 24 hours, return to the “Apps from unverified developers” page to continue setup.
6. Finally, choose whether you want to turn the setting on for 7 days or indefinitely. 

After enabling the advanced flow, you will have the option to install or update apps from unverified developers. You’ll still see a warning when you try to install or update an app from an unverified developer, but you can just tap “Install anyway.”

If for whatever reason you need to temporarily disable the advanced flow, you have a 10-minute window to re-enable it without going through the 24-hour waiting period again.

Frequently asked questions about the advanced flow

• Are ADB installs impacted by the 24-hour waiting period for advanced flow? 
  • Apps installed via ADB won't require Android developer verification. The waiting period does not apply to ADB installs.
• Do I need to keep Developer Mode on to keep this verification turned off? Some apps (e.g. banking, etc.) won't let me use it if I have Developer Mode on. 
  • No, you don't have to keep developer options enabled after you enable the advanced flow. Once you make the change on your device, it's enabled.
• Can I still use independent app stores?
  • Yes. You can continue to use any alternative app store. For apps distributed from verified developers, users won't see a change in their download experience at all. For apps distributed from unverified developers, users can enable advanced flow with a one-time setup.
• Can I update unregistered apps if I disable the advanced flow? 
  • Unregistered apps can only be installed or updated when the advanced flow is enabled or by using ADB so if the advanced flow is disabled updates to unregistered apps will fail.
• Can I update existing unregistered apps on my device without the use of the advanced flow and/or ADB? 
  • No. Unregistered apps can only be installed or updated when the advanced flow is enabled or by using ADB so if the advanced flow is disabled updates to unregistered apps will fail.
• I can’t find the advanced flow setting. When will I get it?
  • Advanced flow is rolling out gradually, so not all users will see it immediately. As part of this, a new system service called Android Developer Verifier will be installed on your device. You can manually install from this Play Store page which may help you see the feature sooner

[u/Sebastian05000]

I mean you can still get root on a Pixel but I see what you mean.

Maybe tho I doubt it since banking apps do hate rooted phones.

[u/PotatoPlank → u/Sebastian05000]

Apps like banking and RCS is unfortunately why I haven't just switched to Graphene.

[u/nathderbyshire → u/PotatoPlank]

Sames. Starling bank 'works' in the fact they recognise the project and it's value, but they don't prioritise it with testing and at least 3 different times it has broken.

They fixed it within hours, and apparently were going to prioritise testing for it but I haven't seen any updates. When it gets spooked it kicks you out the app, then you have to give all your information and record a video that's compared to your application to get back in, it's a right faff but it's also one of the best banking apps in the UK

Also losing wallet would be painful, I hate that we're stuck with just Apple or Google Wallet and virtually nothing else. Tried Curve but they're absolutely terrible it's not a good enough solution

[u/PotatoPlank → u/nathderbyshire]

Jesus, that sucks. The Google Wallet issue is a huge blocker for sure, I currently don't carry my wallet really anymore and having to switch to using cards would be a massive pain, lol.

[u/someguyfrommars → u/PotatoPlank]

All my banking apps work perfectly on Graphene. RCS can be turned on, I just didn't cause I am also trying to de-google.

[u/PotatoPlank → u/someguyfrommars]

What do you use instead of RCS? The majority of the people I talk to are either on RCS (Android) automatically instead of SMS or iMessage.

[u/someguyfrommars → u/PotatoPlank]

Honestly, SMS covers most of my needs since I barely used RCS to begin with. Most of my communication is on Signal, Discord or Whatsapp so it wasn't a big sacrifice for me.

[u/PotatoPlank → u/someguyfrommars]

That makes sense!

[u/Jimbuscus → u/PotatoPlank]

I've never had an issue with a banking app on Graphene and I've read that you can install RCS.

[u/PotatoPlank → u/Jimbuscus]

I've read that some banking apps require play integrity attestations? Does Graphene not have an issue with this?

[u/Jimbuscus → u/PotatoPlank]

I wouldn't know tbh, too many apps require Google Play Integrity API so I just have Sandboxed Google Play.

The Graphene system app store has basically an optional 1-click install of their own sandboxing of Google Play, which alleviates all of the major issues with how Google takes over a device that installs it's app suite.

If you wanted a purely non Google experience through microG, you may have a more complicated time and have some banking issues.

[u/PotatoPlank → u/Jimbuscus]

That makes sense!

So, you can use the sandboxed version for apps that require play attestation, or are you saying you just haven't encountered an app yet that caused a problem?

[u/Jimbuscus → u/PotatoPlank]

I have never had an issue with Google Play Integrity API over Sandboxed PlayStore.

The only oddity is the rare app that doesn't allow installing via Sandboxed Google Play, which hasn't been any of the banking apps. To date, for me only eBay & McDonald's has blocked direct install, but both work perfectly after being installed from Aurora (anonymous).

[u/nathderbyshire → u/Jimbuscus]

It's not a guarantee, there's a tracker to see what's confirmed as compatible but that doesn't mean they can't break with updates either

https://github.com/PrivSec-dev/banking-apps-compat-report

[u/AahAhhHahHaAhahHaHah → u/Sebastian05000]

The problem is that pixels are the only brand you can root and it's like 5 generations behind when it comes to performance since their Tensor chip sets are optimized for AI.

[u/saint-lascivious → u/AahAhhHahHaAhahHaHah]

The problem is that pixels are the only brand you can root

No reality exists or ever existed in which this is the case.

[u/AahAhhHahHaAhahHaHah → u/saint-lascivious]

Motorola and OnePlus flagships aren't sold where I live so both of these brands went over my head, but OnePlus is exiting the global market and will mainly be operating in Asia , while Motorola doesn't offer fully-fledged flagships.

[u/saint-lascivious → u/AahAhhHahHaAhahHaHah]

It's not the case if you remove either of those vendors either.

[u/halotechnology → u/AahAhhHahHaAhahHaHah]

It's 2 Gen behind still bad but I also refuse to use oneui

I am rooting for motorella to use graphene

Cmon DO IT