Safer Sideloading Arrives with Android’s Advanced Flow
Google has announced a new mechanism in Android called Advanced Flow, which enables power users to sideload APKs from unverified developers with enhanced security protections.
The system, launching in August, aims to provide a safer way to install Android apps from unverified sources while reducing malware and scam risks that resulted in approximately $442 billion in losses last year, according to the Global Anti-Scam Alliance (GASA).
Advanced Flow Setup Process
Power users installing APKs must complete a one-time verification process:
- Enable Developer Mode in system settings
- Verify they are not being manipulated by threat actors
- Restart the device and reauthenticate
- Wait one day and confirm that modifications are legitimate
After completing these steps, users can install apps from unverified developers and enable them for one week or indefinitely. Android displays a warning indicating the app comes from an unverified developer.
Designed to Combat Scamming Tactics
The process introduces deliberate friction to counteract common scamming techniques that exploit urgency to convince users to install malicious apps.
“This flow is a one-time process for power users—designed to prevent those experiencing a scam attempt from being pressured by high-pressure tactics into installing malicious software,” Google explains.
“Scammers exploit fear by threatening financial ruin, legal consequences, or harm to loved ones to create extreme urgency. They remain on the call with victims, coaching them to bypass security warnings and disable protections before victims can think critically or seek assistance.”
Developer Verification Requirements
Advanced Flow represents Google’s balanced approach between Android’s open nature and user protection, facilitating the transition to new developer verification requirements initially announced last August.
Developer verification requires all Android app publishers, regardless of distribution method, to have their identity verified by Google. Apps from unverified developers will be blocked from installation on certified Android devices.
Though Google adjusted the original timeline following community concerns, it maintained its commitment to implementing identity verification. The system launches in August 2026, and app developers are encouraged to visit this page for additional details.