Google Unveils Its "Advanced Flow" for Unverified Third-Party App Installation — and a 24-Hour Wait
While developers won't have to pay to register and verify their ID, their apps won't install unless users jump through a series of hoops.
Google has revealed how its "advanced flow" for the installation of applications from outside the Google Play ecosystem will work — and promises the option of a one-off enablement process, albeit one that'll make you wait a day to actually install your apps.
"Android proves you don't have to choose between an open ecosystem and a secure one. Since announcing updated verification requirements, we've worked with the community to ensure these protections are robust yet respectful of platform freedom," says Google's Matthew Forsythe, director of product management for Android app safety. "We've heard from power users that they want to take educated risks to install software from unverified developers. Today, we're sharing details on a new advanced flow that provides this option."
Google's announcement that it was to lock down the Android ecosystem came late last year, with the declaration that developers would need to verify their identities and pay a fee in order to publish applications for the platform — even if said applications were free, open-source, and distributed outside the company's Google Play platform. A backlash followed, and Google promised that it would have a solution for "power users" who still wanted to install apps from third-party sources — a process that used to be called "installing software" but has since been rebranded "sideloading."
The new "sideloading" approach is split into three. The first, "sideloading directly from verified developers," matches Google's announcement of late last year: developers will need to register, prove their identities, and pay a fee, but will have the option of distributing the signed software outside Google Play. The second is new: "sideloading from developers with limited distribution accounts," which is aimed at "students and hobbyists" and limited to installation on a mere 20 devices — but which does not include the need to "provide a government-issued ID or pay a registration fee."
The third and final route effectively disables the new protections and returns an Android device to the current status quo, where apps from any developer can be installed at-will. It's a bit of a rigmarole, however: those who want to retain their freedom of choice in smartphone apps will be required to enable the hidden "developer mode" options, confirm that they are not currently being "coached" into how to enable third-party software installation, restart and unlock the phone, and then wait 24 hours before enabling third-party app support — with the option to enable it for a seven-day period, after which the process will have to be repeated, or permanently.
The developers behind F-Droid, a distribution platform for primarily free and open-source software, have warned that the announcement falls short of a guarantee of continued access to software from unverified developers. "This entire flow is delivered through Google Play Services, not the Android OS, meaning Google can modify, restrict, or remove it at any time without an OS update and without any user consent," the F-Droid team says. "The advanced flow has still not appeared in any Android beta, dev preview, or canary release. As of the date of this update, it exists only as a blog post and UI mockups. The community is being asked to accept a product announcement as a functional safeguard five months before the mandate takes effect."
More information on developer verification and the "advanced flow" is available on the Google Android developer site; the "limited distribution" and "advanced flow" options will launch globally this August, while the existing installation methods will be blocked in Brazil, Indonesia, Singapore, and Thailand in September 2026 with the rest of the world to follow in "2027 and beyond."