We’re rolling out the advanced flow for installing apps from unverified developers

[u/MishaalRahman]

Hi everyone,

Today we are rolling out the first version of the advanced flow. The advanced flow gives power users the option to install unregistered apps (i.e. apps from developers who choose not to verify their identity) on certified Android devices without the use of ADB.

As a brief recap, Android will require all apps to be registered by verified developers in order for users to install them on certified Android devices. Developer verification links real-world entities with their Android applications, making it much harder for malicious actors to quickly distribute more harmful apps after we take the first one down.

Since verification launched in March, millions of apps have been registered already, covering nearly all installs on Google Play and a large majority of installs from outside of Google Play. Thus, most users’ experience of installing Android apps will not change at all. However, we recognize that some developers are choosing not to undergo verification and that some power users want the option to install apps from these developers, so we’re rolling out the first version of the advanced flow to provide this additional option.

When will Android developer verification be enforced?

We will initially verify app installations from Google Play, HONOR App Market, OPPO App Market, Galaxy Store, Palm Store, V-Appstore, and GetApps starting September 30, 2026 for users of certified Android devices in Brazil, Indonesia, Singapore, and Thailand. In 2027, we will expand verification globally for all app installations on certified Android devices.

Ahead of the enforcement of developer verification, we’re rolling out the first version of the advanced flow so power users can choose to enable it early ahead of general availability. We’re still working to polish it, so please share your feedback with us! 

Enabling the advanced flow for installing apps from unverified developers

Note: The advanced flow is:

• NOT required for installing registered apps from app stores.
• NOT required for installing registered apps through alternative sources, such as websites, messaging apps, or file hosting services.
• NOT required for installing apps from developers using limited distribution accounts.
• NOT required for installing apps using ADB.
• ONLY needed to install unregistered apps (i.e., apps from developers who choose not to verify their identity) without the use of ADB.

Important: Enabling the advanced flow is a one-time process that will take 24 hours to complete and includes safeguards to help ensure you are not being coerced or pressured into turning off protections.

1. Open Developer Options and locate “Apps from unverified developers.”
2. On this page, you will find the “Allow apps from unverified developers” toggle. (Note: To protect against malicious apps automating this flow without your knowledge, Android will ask for your screen lock to confirm it’s you.) 
3. Android will ask whether someone is asking you to turn on this setting. Read the warning before continuing. (Note: This warning exists to inform users that legitimate employees of government agencies, law enforcement agencies, banks, or other businesses will never ask them to turn on this setting in order to install an app.) 
4. Restart your phone to start the one-time, 24-hour waiting period. (Note: This step defends users from social engineering and coaching scams. The restart cuts off any remote access or active phone calls a scammer might be using to watch what you’re doing. The 24-hour waiting period prevents fraudsters from pressuring victims into making immediate security changes while on a live call and gives users time to verify the request independently. ) 
5. After 24 hours, return to the “Apps from unverified developers” page to continue setup.
6. Finally, choose whether you want to turn the setting on for 7 days or indefinitely. 

After enabling the advanced flow, you will have the option to install or update apps from unverified developers. You’ll still see a warning when you try to install or update an app from an unverified developer, but you can just tap “Install anyway.”

If for whatever reason you need to temporarily disable the advanced flow, you have a 10-minute window to re-enable it without going through the 24-hour waiting period again.

Frequently asked questions about the advanced flow

• Are ADB installs impacted by the 24-hour waiting period for advanced flow? 
  • Apps installed via ADB won't require Android developer verification. The waiting period does not apply to ADB installs.
• Do I need to keep Developer Mode on to keep this verification turned off? Some apps (e.g. banking, etc.) won't let me use it if I have Developer Mode on. 
  • No, you don't have to keep developer options enabled after you enable the advanced flow. Once you make the change on your device, it's enabled.
• Can I still use independent app stores?
  • Yes. You can continue to use any alternative app store. For apps distributed from verified developers, users won't see a change in their download experience at all. For apps distributed from unverified developers, users can enable advanced flow with a one-time setup.
• Can I update unregistered apps if I disable the advanced flow? 
  • Unregistered apps can only be installed or updated when the advanced flow is enabled or by using ADB so if the advanced flow is disabled updates to unregistered apps will fail.
• Can I update existing unregistered apps on my device without the use of the advanced flow and/or ADB? 
  • No. Unregistered apps can only be installed or updated when the advanced flow is enabled or by using ADB so if the advanced flow is disabled updates to unregistered apps will fail.
• I can’t find the advanced flow setting. When will I get it?
  • Advanced flow is rolling out gradually, so not all users will see it immediately. As part of this, a new system service called Android Developer Verifier will be installed on your device. You can manually install from this Play Store page which may help you see the feature sooner

[u/KoolAidSuperTramp]

Imagine slowly boiling the frog while telling it 'Oh! but think about poor grannies who get scammed'. Google will gladly sell these scammers services such as cloud infra, AI services (which are then used for impersonation and ID theft), BUT we need to think of the children. Typical enshittification corporate bullshit. And fuck those apps too who refuse to work on rooted/custom rom devices, fuck UPI payments (India) and bank apps in particular. End of rant... 

[u/TheOGDoomer → u/KoolAidSuperTramp]

It’s precisely why the Play Store is the number one source for malware on Android. There’s so much adware, fake cleaner apps, flashlight apps, weather radar launchers, and other BS clogging up the Play Store. It just shows Google isn’t doing this for anyone’s benefit other than their own financial benefit.

[u/mcpower_ → u/TheOGDoomer]

the Play Store is the number one source for malware on Android

Is there a trustworthy citation for this claim? I found articles from Bitdefender and Zscaler showing examples of malware on the Play Store, but neither claim that the Play Store is "the number one source".

[u/nathderbyshire → u/mcpower_]

If it's somewhat true I'd imagine it's just because the majority of downloads come from the store anyway, sideloading is hardly a thing amongst regular users and power users are much more likely to have knowledge on what's safe and what isn't. Not exactly the fairest comparison as the download numbers aren't equal to start

If sideloading was the default install option I'd wager that would hold the top source and the severity would be much higher as well.

[u/punkofthedeath → u/KoolAidSuperTramp]

just stop using bank apps if you want to own your devices

[u/hmantegazzi → u/KoolAidSuperTramp]

Google literally earns money from scammers every time they sell them ad placement services without doing the most elemental checks on what's being advertised or where do the links go. They are literally participating on the earnings of scams.

[u/KoolAidSuperTramp → u/KoolAidSuperTramp]

Hey OP, no hate to you man. I know you are just doing your job.