Skip to content
Tech News
← Back to articles

Google introduces a new way for users to sideload Android apps that still protects against scams

read original get Android App Sideloading Security Kit → more articles
Why This Matters

Google's new 'advanced flow' feature for sideloading Android apps offers users greater flexibility to install apps from outside the Play Store while maintaining safeguards against scams. This development reflects a balance between user freedom and security, addressing the demand for more control over app sources amid ongoing concerns about malware and fraud. It highlights the industry's ongoing efforts to empower consumers without compromising security measures.

Key Takeaways

After settling its lengthy antitrust battle over the Android app ecosystem earlier this month, Google said Thursday it will make it easier to install Android apps from outside the Play Store. The company shared new details about an “advanced flow” setting that will allow Android device owners to turn off a verification requirement, which otherwise prevents users from sideloading apps.

The tech giant announced last year that it would require all Android apps to be registered by verified developers to be installed on certified Android devices. By doing so, the company aimed to limit the ability of bad actors to distribute malware, conduct financial fraud, and steal users’ personal data through apps outside the Play Store.

While additional security mechanisms can help reduce those risks, some Android users want the freedom to install unverified apps and accept the responsibility if those apps turn out to be unsafe.

With the new “advanced flow” setting, users will be able to go through a one-time process to disable these additional protections while still helping to prevent scams.

The process begins by enabling developer mode in Android’s system settings, a step designed to prevent any accidental triggers or “one-tap” bypasses that bad actors often use in high-pressure scams. Google notes that scammers tend to exploit fear to create a sense of urgency in their victims, using tactics like threats of financial ruin, legal trouble, or harm to a loved one. They also often stay on the phone with the victim and guide them through the process of disabling security protections on their device.

Globally, 57% of adults experienced a scam in 2025, according to a report by the Global Anti-Scam Alliance (GASA), cited by Google.

Image Credits:Google

After enabling developer mode, there’s a quick check designed to make sure that no one is coaching the user to turn off their security protections. Users will then restart their phone and reauthenticate, a process that cuts off any remote access or active phone calls that a scammer may be using to watch what their potential victim is doing.

After a one-time, one-day protective waiting period, users will be able to confirm it’s really them who is making the change. Since scammers often rely on manufactured urgency, this waiting period gives users time to think, Google explains. When the period is up, the device owners can use biometric authentication, like a fingerprint or face unlock, or use their device PIN to confirm the change.

When the process is complete, Android users will be able to install apps from unverified developers outside the Play Store. Users can choose the option of enabling this for 7 days or indefinitely. Google says users will still see a warning that the app is from an unverified developer for safety purposes, but users will be able to bypass this warning with a tap.

... continue reading