New Delhi: Google is properly gearing up for its latest feature for Android that gives experienced users more control over application installations, particularly when it comes to sideloading applications from outside the Play Store. This upgrade comes as part of Google’s broader developer verification initiative, first it was announced in August, and targets to strengthen Android’s defences against scams and malware. Under the upcoming system, Google will continue to require developers to verify their identity before users can install their application, even when sideloading. However, in response to feedback from the developers and advanced users, the company is now building an advanced flow that lets experienced users bypass verification warnings after acknowledging the risks involved.
Google has also described this as a feature for developers and power users, not general consumers. It is especially designed to ensure that those with the technical expertise can still install unverified applications for testing or personal use, while protecting less experienced users from being tricked into unsafe downloads. Google has also released an statement in which they stated that, “We are designing this flow specifically to resist coercion, ensuring that users aren’t tricked into bypassing these safety checks while under pressure from a scammer.” It will also include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands.
This feature is still in early development, with Google currently gathering feedback on its design from their developers and from their teams. More details are expected in the coming months. Google defended the latest safeguards by citing a rise in social engineering attacks, particularly in regions such as Southeast Asia. In one common scam, attackers call the victims posing as bank officials and persuade them to install a fake verification application to secure their accounts. Once it is installed, this malicious application intercepts notifications and captures two-factor authentication codes, allowing the scammers to drain the victim’s bank account.
Google has also stated that the developer verification helps prevent such attacks by forcing application creators to use real, verifiable identities when distributing software. The company argues that it makes it significantly more complex and more expensive for bad actors to operate. Without verification, bad actors can spin up new harmful applications instantly, and it becomes an endless game of whack-a-mole.
The company claims that verification requirements on Google Play have already proven effective in reducing malicious activity. The same model will now expand to the broader Android ecosystem, ensuring accountability behind every application users install. Google has also confirmed that they are working on a dedicated account type that will be especially designed for students and hobbyists, enabling limited application distribution without complete verification, another nod to Android’s open-source roots. The advanced user flow will strike a middle ground between freedom and security, giving the developers flexibility while keeping the regular users safe from the deceptive or dangerous installations.
