Google’s revamped process for sideloading apps on Android will require several steps, including a mandatory 24-hour waiting period before installing apps from unverified developers. The “advanced flow,” as Google calls it, goes into effect from August and forces users to verify their identity by going through a 4-step process with the end goal of preventing potential scams.
As Google explains in its Android Developers Blog post, most scammers rely on coercion and fake urgency to install malicious software. Google’s solution involves enabling developer mode, then confirming that you are not being coerced into turning off security protection on your phone, followed by a 24-hour wait period and a biometric authentication/device PIN entry.
Google confirmed that this will be a one-time process, so after you’ve completed the verification steps and gone through the waiting period, your device will present you with the option to install unregistered apps for an indefinite period of time. Users will also be able to turn on sideloading privileges for a 7-day period.
Google is still pushing its developer identity verification program, which will go into effect from September. Unverified developers will need to verify their identity with Google by sharing personal details such as their address, email, phone number and a copy of their ID. Google is also requiring a $25 registration fee.
There is a free workaround for “hobbyists” and students with the option to share their apps with up to 20 people without providing their ID or paying the registration fee.
In related news, Android Community Engagement Manager and long-time tech journalist Mishaal Rahman confirmed that sideloading apps using Android Debug Bridge (ADB) will bypass Google’s advanced flow process and its 24-hour waiting period requirement.
Google initially announced it would be requiring developer verification for sideloading apps last August and then detailed its advanced flow process in November.