Google announced it won’t go too hard on its plan to enforce developer verification for all Android apps, including those outside of Google Play. It was feared that the move would be a major blow to sideloading, as Google would want developers to get verified, even if their app is distributed via sideloading.
Bad actors can go to great lengths to trick unsuspecting victims, and “verification changes the math by forcing them to use a real identity to distribute malware, making attacks significantly harder and more costly to scale,” Google notes. The company recently sued a massive phishing service that targeted over 1 million victims worldwide.
Verified developers are required to provide personal details, such as their legal name, email address, address, phone number, and, in some cases, an official government ID.
However, Google faced criticism over its plans and received feedback that developer verification could become a barrier to building apps for small groups, such as family or friends. In its latest move, Google has eased its app sideloading requirements for “experienced users” who are willing to take on a higher risk and download unverified apps.
For experienced users, Google said it’s working on an advanced flow that lets them accept the risks of installing unverified apps. The flow will include warnings and safety measures “to resist coercion, ensuring that users aren’t tricked into bypassing these safety checks while under pressure from a scammer.”
The search giant is also readying a new developer account type for students and hobbyists, who won’t have to go through the full verification requirements to distribute their apps to a limited number of devices.
Developer Verification was announced in August this year, and it’s now available in early access in the Android Developer Console for developers who distribute outside Google Play. Before expanding globally by 2027, the verification program will roll out in September 2026 in Brazil, Indonesia, Singapore, and Thailand.
