Google Play regularly rolls out new features, but these features typically don't have a broad impact on the Android ecosystem, only the users of those services. Now, Google is making major changes to how apps are distributed and used by Android users with a new security measure.
Google announced in a blog post that it will soon make developer verification mandatory for all apps installed on Android devices. Interestingly, this covers not only Google Play apps (which already come from verified developers), but also sideloaded apps, often from other stores and web sources.
The company said the main motivation for the change was that its own analysis showed that sideloaded apps from the internet have more than 50 times the amount of malware than Google Play apps. Therefore, Google will force developers to authenticate so that their apps can be installed on end-user devices. The company believes this authentication will enhance trust and accountability while limiting bad actors from exploiting anonymity.
It's worth noting that developer verification does not include verification of the content of distributed apps, meaning it is still possible for malware to compromise Android devices through verified developers. That way, the Mountain View company can more easily identify malicious actors and potentially stop them from spreading further harm.
To meet this requirement, Google will create a dedicated standalone Android developer console for developers who want to distribute their apps outside of Google Play. Likewise, Google will provide a console for students and hobbyists who create and test apps on their personal devices.
It’s worth emphasizing that this mandatory requirement only applies to “certified” Android devices, i.e. phones with Play Protect enabled. Google will launch an early access program in October 2025 and a public verification process in March 2026. Brazil, Indonesia, Singapore and Thailand will begin previewing implementation of this requirement in September 2026, with plans to roll out globally in 2027 and beyond.