On Monday, Google disclosed that it is strengthening its security protocols for Android app distribution.
Next year, Google will begin verifying the identities of developers who distribute their applications on Android devices rather than solely those who distribute through the Play Store.
The global deployment will be more gradual, but the changes will affect all certified Android devices once they are live.
The tech behemoth emphasizes that this does not preclude developers from distributing their applications through other app stores or via sideloading, as Android will continue to be accessible. Nevertheless, developers who valued the privacy of alternative distribution methods will no longer have that option.
Google claims this will reduce the number of malicious actors who conceal their identities to distribute malware, commit financial fraud, or take personal data from users.
Google has reported that the number of malware downloads from internet-sideloaded sources was over 50 times higher than that from Google Play, which has mandated developer verification since 2023, according to its own survey.
Beginning in October 2025, Google will permit developers interested in testing the system to register for early access to provide feedback. Verification will be implemented for all developers in March 2026.
The new requirements will be mandatory for any app installed on an Android device in Brazil, Indonesia, Singapore, and Thailand by September 2026. The requirements will be implemented globally beginning in 2027.
Independent developers may be compelled to register as a business to protect their privacy, as they must provide their legal name, address, email, and phone number.
Apple implemented a comparable modification to the EU App Store earlier this year to comply with the Digital Services Act (DSA), which mandates that app developers submit their “trader status” when submitting new apps or app updates for distribution.
Google has indicated that student and hobbyist developers will be permitted to utilize a distinct Android Developer Console account upon the system’s implementation, as their requirements differ from those of commercial developers.
The modifications could substantially affect the Android app ecosystem and distribution, as Google endeavors to mitigate the security issues and malware that have historically affected its platform.
