Google adds 24‑hour lock
Google will require a mandatory 24‑hour waiting period for sideloading apps from unverified developers — an “advanced flow” aimed at blocking scams while preserving sideloading in a limited form ( ). The policy also adds developer verification steps and is scheduled to roll out in September 2026, tightening distribution for power users and indie devs (theverge.com).
The announcement was posted to the Android Developers blog on March 19, 2026 by Matthew Forsythe, who framed the advanced flow as a one‑time process designed specifically to “resist coercion” during scam attempts. (android-developers.googleblog.com) Google lays out explicit steps inside that flow: users must enable Developer Mode, complete a “confirm you aren’t being coached” check, restart the device to cut off remote interference, and then reauthenticate with biometrics or PIN before continuing. (android-developers.googleblog.com) After completing those safeguards users can choose a temporary enable option (7 days) or allow installs from unverified developers indefinitely, according to Google’s how‑to description of the new flow. (android-developers.googleblog.com) Google says the advanced flow and a new “limited distribution” account type will be available in August via Play services, and the company has published an Android Developer Console for teams that distribute apps outside Google Play. (android-developers.googleblog.com) The developer registration system requires a package‑name/signing‑key link to a verified identity; Google documents show a $25 one‑time fee for full distribution accounts while limited accounts for students and hobbyists are free. (developer.android.com) Google’s timeline shows early access invitations began in late 2025, registration opened to all developers in March 2026, and enforcement will start regionally before expanding worldwide through 2027. (developer.android.com) The company added the advanced flow after developer and community pushback over the original verification plan, publicly revising its approach in November 2025 to include simplified workflows and a path for power users. (bleepingcomputer.com) Google cites scam statistics from a 2025 Global Anti‑Scam Alliance report—57% of adults surveyed experienced a scam in the past year, with global consumer losses of $442 billion—as a key rationale for the new, coercion‑resistant installation steps. (android-developers.googleblog.com)
