Google released Android 17 QPR2 Beta 4 last week, bringing new additions such as a dedicated Agent Dashboard . However, the update also tackles a long-standing security and convenience pain point by introducing one-time installation permissions for unknown apps, making APK sideloading significantly safer without compromising convenience for power users.
On older Android versions, sideloading an APK outside official app stores requires granting the host app (such as a browser or a file manager) the “Install unknown apps” permission.
Historically, this has been an all-or-nothing toggle. Once turned on, that app retains permanent APK installation privileges until manually revoked. Because turning it off requires digging deep into Settings > Apps > Special app access > Install unknown apps , most users simply forget to do so. The workflow for granting the permission is also disruptive, kicking you out of your active app into the system Settings app just to flip a switch before navigating back.
Further, in Android 17 QPR2 Beta 4, you can also manage the “Install unknown apps” setting in Settings > Apps > Special app access > Install unknown apps .
Rather than a binary, per-app on-off toggle, you can now set apps to either:
Always allow: Similar to the “Allow from this source” toggle, the host app will be permanently granted permission to install other apps.
Similar to the “Allow from this source” toggle, the host app will be permanently granted permission to install other apps. Ask every time: Presents the new security prompt for user approval whenever the host app wants to install another app.
This change gives users more security and control over sideloading while maintaining some modicum of convenience when installing apps from trusted sources. The changes are already live in Android 17 QPR2 Beta 4, and hopefully make their way to the stable release.