Back in the fall, Google announced controversial plans to phase out the ability to sideload apps from unverified developers on Android devices. In other words, installing APK files from outside the Google Play Store, usually from independent developers. Naturally, since a core part of Android has always been the freedom to install apps from anywhere — unlike iOS — reactions to the plan were quite critical.
Google says the goal is to curb malware, stop scams, and better protect users, but many users worry it could effectively spell the end of sideloading, with developers needing Google’s approval just to have their apps installed on certified Android devices. In November, responding to that backlash, Google said it was working on a new system that would still allow “experienced users” to install apps from unverified sources when its new protections roll out. Now, Google has revealed the details of how all this will work.
Google’s new “advanced flow” system will let you disable its new sideloading protections, which block apps from unverified sources. It’s a one-time setup, so you don’t have to do it every time you want to sideload an app, but there’s a major catch that might annoy some users. After turning these protections off, you’ll have to wait 24 hours before you can actually sideload anything.
“Android is built on choice. That is why we’ve developed the advanced flow — an approach that allows power users to maintain the ability to sideload apps from unverified developers,” explained Matthew Forsythe, Android’s director of product management and app safety.
How it all works
Google’s new system aims to stop users from being scammed
If you want to keep sideloading apps from anywhere on your Android device once Google rolls out its new security protections in the coming year, its new Advanced Flow system adds a few extra hoops to jump through.
First, you’ll need to enable Developer mode in Settings. On most Android devices, that means heading to Settings > System and tapping the build number seven times.
From there, go into Developer options and toggle on “Allow Unverified Packages.” When you do, you’ll see a prompt asking you to confirm that no one is coaching you through the process. Google says this is meant to help users recognize if they’re being pressured by a scammer into disabling protections.
After tapping “No one is instructing me,” you’ll get another warning that a security delay is required, and your device will restart. Once it boots back up, you’ll have to wait 24 hours before you can continue.
After that waiting period, you can go back and finish the process. You’ll see a “Security delay complete” message, and you’ll need to verify it’s really you making the change using biometric authentication, like a fingerprint or face unlock, or your PIN.
Finally, you’ll be able to install apps from unverified sources. At that point, you can choose whether to allow it temporarily for seven days or indefinitely. If you don’t want to deal with this process again, you’ll want to go with the indefinite option.
Personally, although the 24-hour delay can be frustrating, I believe Google has found the right balance with its advanced flow system. It allows users who know what they’re doing and accept the risks to continue sideloading apps freely, while also safeguarding those who might unknowingly fall for scams. After hearing so many stories of people, especially seniors, becoming victims of high-pressure scams, I think these protections are sensible. It’s only a one-time process too, so once you’ve completed it, you won’t have to do it again at least.
As for when this new advanced flow system will roll out, Google states it will be available in August, before it implements its new developer verification program. The new developer verification program will become mandatory in Brazil, Indonesia, Singapore, and Thailand starting in September of this year, before expanding globally in 2027.
