Abstract:
Google has enabled Android developer verification protection measures in Brazil, Indonesia, Singapore and Thailand since September 30, which is applicable to certified devices running Android 7 and above. The first phase involves installing apps through Google Play, Samsung Galaxy Store, Honor App Store, OPPO App Store, Xiaomi GetApps, vivo App Store and Transsion Palm Store. Google plans to gradually expand verification requirements to globally certified Android devices starting in 2027.
The new regulations require developers to register their identities and their applications, with the aim of reducing the space for malware publishers to use their anonymous identities to repeatedly launch harmful applications. Registered apps can be installed as normal; if a user attempts to install an app from an unverified developer, a stricter "advanced process" will be enabled. This does not mean a complete ban on sideloading, nor does it mean that as long as it is not downloaded from Google Play, it will not be installed, but it will add additional steps for the first batch of participating app stores and designated regions.
If users want to install unverified applications, they need to enable developer options in the system settings, confirm that no one is instructing them to bypass security measures on the phone or remotely, and then restart the phone. After a day of waiting, users must verify their identity again, either using fingerprints, facial recognition or a device PIN. Google said these steps are designed to interrupt the process by which scammers use a sense of urgency to induce victims to install malicious apps and give users time to reconsider.
After completing an advanced process, users can choose to allow the installation of unverified applications for seven days, or keep this setting turned on. Afterwards, they will still see risk prompts during installation and can decide whether to continue. Google also stated that unregistered applications can still be installed through the Android Debug Bridge (ADB) or advanced process, so the sideloading capability has not been completely removed, but it is more cumbersome for ordinary users.
Google previously stated that Android developer verification has covered the vast majority of applications on Google Play and provides the Android Developer Console for developers who only distribute applications outside of Play. Students and amateur developers can also apply for a limited distribution account and share their apps to up to 20 devices without having to provide a government-issued ID or pay a registration fee. The company said that opening up different channels for developer identity verification is to reduce the barriers caused by the new regulations to small developers and independent projects.
However, some Android users are worried that adding sideloading steps may be the first step towards a closed ecosystem for the platform. Google emphasized that the advanced process still retains the option to install unverified applications, and the setting is mainly to prevent users from being urged to turn off security protection when encountering fraud. The new regulations are currently only implemented in four countries and seven cooperative stores, and the global promotion schedule still points to 2027.
Comments