Tushar Mehta / Android Authority
Google is set to change, if not completely eradicate, Android sideloading as we know it. The change comes into effect as early as September this year, and could make sideloading more drawn-out and cumbersome.
While Google has ensured sideloading isn’t going away, it plans to introduce a “high-friction” flow for installing apps from unverified developers. This is certain to unsettle many people, especially power users. But for the broader Android user base, it could be a lifesaver, especially with APK-based attacks on the rise.
While sideloading has been the most beautiful and liberating aspect of Android, it’s heading for a watershed moment. And here’s why embracing it, rather than opposing it, could ensure Android lives longer.
What do you feel about Google's plan to limit sideloading on Android? 29 votes I am really upset 38 % It's annoying, but I'll be okay 38 % I don't care much 21 % Anything else (let us know in comments) 3 %
A case for making sideloading on Android slower by design
One of the primary reasons to crack down on unverified installations on Android is the substantial increase in APK-based malware attacks over the years. Kaspersky alone identified more than 22 million potential incidents of attacks on Android users in the first half of 2025, a notable 29% increase compared to H1 2024. The report cited nearly 143,000 different strains of infected app packages, or APKs, distributed through seemingly harmless channels. A third of these packages were designed for banking fraud.
In addition to Kaspersky, organizations such as Malwarebytes and Zimperium have noted instances in which attackers prey on human vulnerabilities or temptations to distribute malware. These malicious apps masquerade as modified versions of otherwise free apps and are distributed through Telegram, Discord, and other unregulated social channels. The best part? These apps even work as promised, so they don’t make the user suspicious immediately.
Besides modified apps with perks, attackers also use garbs of free tools or apps with adult content to lure users into installing them. Often, these apps, especially when downloaded from unreliable sources or via messaging channels, include an embedded software development kit (SDK) that can be used to install a remote access tool and subsequently take over a user’s phone, with the ultimate goal of emptying their bank accounts.
APK-based attacks have evolved, and so should Android.
... continue reading