Google gives Android users a way to install unverified apps if they prove they really, really want to
- Reference: 1773945006
- News link: https://www.theregister.co.uk/2026/03/19/google_android_unverified_apps/
- Source link:
On Thursday, Google said it will offer Android users a way to continue installing software from unverified developers.
"We've heard from power users that they want to take educated risks to install software from unverified developers," wrote Matthew Forsythe, director of product management for Android App Safety, in a [1]blog post .
[2]
Power users, for lack of a better term, have been vocal in their opposition to Google's plan, which was announced last August. [3]Starting in September 2026 , the Chocolate Factory required apps on certified Android devices to be linked to a verified developer account.
[4]
[5]
Although Google insisted it was important for security, many voices cried out against the verification process, which involves a $25 fee and providing Google with identity documentation. In February, 37 civil society groups, non-profit organizations, and tech companies published an open letter [6]objecting to the requirement .
So, according to the blog post, Android users will still be able to install apps from unverified developers through a one-time process that has been designed to counter scenarios where the user is pressured to install malware.
[7]
"Because the consequences of these scams that use sophisticated social engineering tactics are so severe, we have carefully engineered the advanced flow to provide the critical time and space needed to break the cycle of coercion."
[8]Anthropic's Claude claws its way towards the top of the AI market
[9]PwC will say goodbye to staff who aren't convinced about AI
[10]UK blinks on AI copyright carve-out after star-studded revolt
[11]Hide and sleek: Latest Vivaldi release can tuck its UI away until summoned
The process is designed to create friction. Users must first enable developer mode in system settings. They then need to confirm that they're not being coerced. After that, they need to restart their phone and reauthenticate. And then they need to wait one day.
"There is a one-time, one-day wait and then you can confirm that this is really you who's making this change with our biometric authentication (fingerprint or face unlock) or device PIN," said Forsythe. "Scammers rely on manufactured urgency, so this breaks their spell and gives you time to think."
Thereafter, you can install apps from unverified developers on the device you notionally own. Users will have the option to enable such apps for seven days or indefinitely.
Google has also built another installation flow via free, limited distribution accounts for students and hobbyists. Forsythe said these accounts allow users to share apps with a small group or people (20 or less) without verification.
[12]
Both options will be available in August before the new developer verification requirements take effect. ®
Get our [13]Tech Resources
[1] https://android-developers.googleblog.com/2026/03/android-developer-verification.html
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2abyAEsxmqC_2LNqTBpxk6wAAAE0&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://developer.android.com/developer-verification
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44abyAEsxmqC_2LNqTBpxk6wAAAE0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33abyAEsxmqC_2LNqTBpxk6wAAAE0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2026/02/24/google_android_developer_verification_plan/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44abyAEsxmqC_2LNqTBpxk6wAAAE0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2026/03/19/anthropic_claude_market_share/
[9] https://www.theregister.com/2026/03/19/pwc_ai/
[10] https://www.theregister.com/2026/03/19/uk_ai_copyright/
[11] https://www.theregister.com/2026/03/19/vivaldi_7_9/
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33abyAEsxmqC_2LNqTBpxk6wAAAE0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://whitepapers.theregister.com/
I rely on F-Droid for useful and trustworthy Android software. Also, the official Google store offers a garish nightmare experience.
Play is a shithole appstore polluted with adware software and pay 2 win live-service gacha slop. Also what happens if the user turns off developer mode after enabling "un-verified" software installation? Will I have to keep dev mode turned on at all times? Some third party android software throws a hissy fit if you so much as have dev mode turned on.
I bet you can enable Airplane mode, roll the date back a day, turn on side loading, then turn off airplane mode.
Criminals will find much easier workarounds in no time. Google's security is all theatrics to distract from their true sinister goals.
No-one wants to wait a day to be able to install an app
Hmm. As I read it this is wait a day to allow installation of any google-unverified apps; i.e. you only have to wait a day once, at the start of the permissions change. This would indeed be annoying, but at least it is less bad than waiting a day for each different app...
Fucking idiots
This is an attempt to stop the likes of grayjay. They had to remove features to get it in the play store so we all just download it off their site to install it.
But on another note. At work, we used a 3rd party company that refused to pay for a certified play store app so we always had to install it manually with their APK. So their stupid new rule would stop this. Cockends have never worked for normal companies or really, its just google wanting more control and money.
Cunts.
What's old is new
I don't know how many Symbian users can still remember a similar situation where you had to acquire a device specific key of your own to install unsigned software but it was a vicious hassle. It might have been a contributing factor to why we don't use Symbian anymore.
WTF! Imagine this was how Microsoft decided that Windows should work, and if you want to download and exe from the internet, you had wait 24 hours before you can install it.
This, this, this, this and this.
Commentards like to put the boot into MS, and with good reason, but Google et al are doing things 90’s MS only did in their (wet) dreams.
No, on a new device, you have to wait 24 hours to be granted the ability to install unverified apps. It's a one-time operation, not for every app.
MS can f*@! right off
Try running llmfit in Windows Sandbox and you'll realise true pain and stupidity [undisableable device guard] from Microsoft. A power user can't even run it / bypass device guard.
Some clever registry and power shell / policy stuff can get you through if you're truly sadistic enough to pursue it.
Hurrah!
I can now trust my apps and myself! Or can I? Or should I?
I have been never as motivated to install an Android alternative as I am right now, thanks Google, you turned Android from FOSS into a closed System.
Do it once…
It's a one-off process. I for one don't intend to wait 24 hours the first time I want to install something. This workaround is going to be released weeks before the restrictions are enforced, so I shall plan ahead,, set the option, wait 24 hours, and confirm it knowing that when I do install software it'll Just Work.
Not sure why the comments are such a muppet show
Re: Do it once…
Imagine you bought a new phone and wanted to install something not on Play store.
That'd be a little annoying, right?
Look at it from Google's point of view
Like most of you, I hate the fact android has gotten more closed over the years. You have to go through so many hoops just to have root on your own device.
Without root, you can't easily debug/kill an out of control process, you can't rsync everything to your own backup server, you can't tweak certain settings, and so on. And system monitoring apps are less useful due to the extra restrictions.
I HATE IT. I used to do far more tinkering with my 5.0 devices than with my current ones, and they were the better for it.
Of course, it's not for everyone, and no-one should need to be a tech geek to operate one.
HOWEVER, I do have to feel some sympathy for Google. Every time they restrict something, malware updates its instructions accordingly. I've even heard that when some options had to be enabled via ADB, certain malware promising free sports gave a step by step guide to the "consumer" on how to do it. Despite many of the warning along the way.
Remember the old couple scammed out of money, featured on BBC scambusters or something. The scammer said they were from the bank. etc. and told them they needed to transfer the money. Then they told them that when they called the bank, the bank would need a reasonable reason to transfer the money, so they needed to make up it was for their son or something. The scammer coached them on how to lie to the bank, because he reasoned that's the only way to get your money out because of "government mandated rules". They lied to the bank, ended up losing their savings, and then moaned about the bank about it.
Now, I know a certain person here will reply "You're just making that up", but unfortunately, unlike the last time he accused me of that, I can't in this case follow up with a link to the relevant video.
Back to android - people will follow instructions for free videos, free sport, free porn etc. and for even more innocent goals, and they will switch off all reasoning skills because the person on the end of the phone sounded nice.
And then the newspapers have articles about "Android is insecure, this is what happened to some people" - Now, if it's a legitimate issue, then Google deserves to be called out. But if you delve deeper, most of them are due to the user doing something stupid.
Can you imagine a newspaper report "LOCAL BANK GIVES AWAY CUSTOMERS MONEY WITHOUT SIGNATURE", and reading on you find that the person left their card in a public place with a big sign saying "My PIN is abcd"?
It boils down to the same sort of thing, but people are seemingly allowed to get away with it when it comes to their phone.
I grew up in a non-techie household - all my friends and past girlfriends have been non-techie. I'm fully aware of how computerised things can get confusing, and am the first to moan about stupid UI's on devices - I constantly deride "designers" who are so absorbed in geekism, they can't seem to use any common sense in their design.
But that's a different issue. In this case there is unfortunately a definite need for some people to be "protected from themselves" - and for as long as google/etc. are blamed when things go wrong, they are going to be compelled to drop functionality completely.
This proposed method sounds ridiculous - but all other "jumping through hoops" methods have failed, and as we speak, no doubt some malware writer is thinking how to get people to jump through these hoops whilst convincing the punter that they are legitimate.
Re: Look at it from Google's point of view
Ok, I found the episode: [1]https://www.bbc.co.uk/programmes/p0gd4m3z
It's very similar to this case: [2]https://www.bbc.co.uk/news/uk-england-leeds-67208755
Now, if this was instead an android phone, newspaper headlines would be saying "INSECURE ANDROID PHONE STEALS COUPLES LIFE SAVINGS"
[1] https://www.bbc.co.uk/programmes/p0gd4m3z
[2] https://www.bbc.co.uk/news/uk-england-leeds-67208755
"break the cycle of coercion"
There is an unintended irony here.
> And then they need to wait one day.
What a load of bullshit. No-one wants to wait a day to be able to install an app, this still kills independent developers and FDroid.
Try again Google.