Consumer Rights Wiki

Android Developer Verification: Difference between revisions

← Older edit
VisualWikitext
Pawke (talk | contribs)
confirmed
2 edits
wip, start fleshing out the page
Cleaned up and formatted citations; removed irrelevant content; removed unverifiable info; added external links section; other general clean-up.
 
(69 intermediate revisions by 39 users not shown)
Line 1: Line 1:
{{StubNotice}}
{{IncidentCargo
{{IncidentCargo
|Company=Google
|Company=Google
|StartDate=2025-08-25
|StartDate=25 August 2025
|EndDate=
|Status=Active
|Status=Active
|ProductLine=Google-certified Android devices
|ProductLine=Android
|Product=Android
|Product=Google-certified Android devices
|ArticleType=Service
|ArticleType=Service
|Type=Anticompetitive Behavior, Digital restrictions, Privacy
|Type=Anti-competitive behavior, Digital restrictions, Privacy
|Description=A planned restriction that forces developers to submit their identity to Google and pay a fee for their apps to be installable onto Android devices.
|Description=A planned restriction that forces developers to submit their identity to Google and pay a fee for their apps to be installable onto Android devices.
}}
}}


On August 25th 2025, Google has announced an upcoming application installation restriction on Google-certified Android devices, unless the developer is registered and verified through their Developer Verification program, which in some cases requires a legal identity document verification as well as a flat fee.
On August 25, 2025, [[Google]] announced an upcoming [[Google Android restrict app sideloading|application installation restriction]] on Google-certified [[Android]] devices, requiring '''all''' developers to register and verify their real-life identity through the Developer Verification program and be approved by Google before their apps can be installed on Android devices. This requirement extends to '''''all''''' installation methods including "[[sideloading]]", third-party app repositories like [[F-Droid]], and direct APK installations. Google stated that this change "keeps the ecosystem open".<ref>{{Cite web |author= |title=Elevating Android's security to keep it open and safe |url=https://developer.android.com/developer-verification |website=[[Android]] |date=Aug 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20250825180832/https://developer.android.com/developer-verification |archive-date=25 Aug 2025}}</ref>
 
==Change of principles==
This is a giant shift from Android's traditionally open ecosystem and an abandonment of Android's founding principles.<ref>{{Cite web |author= |title=Governance philosophy |url=https://source.android.com/docs/setup/about#governance_philosophy <!-- Original URL: https://source.android.com/about/philosophy.html -- I found no material differences between the two as of 8 June 2026, but the original is being included here to make searching for older IA captures easier. (Though much of them are 404s; 2014 is the last year with working captures.) -Sojourna --> |website=[[Android]] |date= |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260406162305/https://source.android.com/docs/setup/about#governance_philosophy |archive-date=6 Apr 2026}}</ref> It renders all existing APK files created throughout the years useless, and gives Google the ability to censor apps they dislike, such as those that can create permanent local backups of [[YouTube]] videos outside of Google's ecosystem with no [[data lock-in]] (a popular example being TubeMate), and lets them terminate developers out of spite for reasons unrelated to their apps (such as holding political views Google disagrees with), in addition to giving governments the ability to order Google to censor unwanted apps, similar to what already happened with Apple in China.<ref>{{Cite web |author= |title=Apple Is Censoring its App Store for China |url=https://www.techtransparencyproject.org/articles/apple-censoring-its-app-store-china |website=Tech Transparency Projects |date=23 Dec 2020 |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20251124220615/https://www.techtransparencyproject.org/articles/apple-censoring-its-app-store-china |archive-date=24 Nov 2025}}</ref>
 
It also prevents new Android applications from being developed offline with no Internet connection or Google account, given that every package name has to be registered in the developer console. This can prevent even verified developers from creating apps in countries where governments intermittently turn off Internet access, block access to Google services, or selectively block individuals from accessing the Internet.<ref>{{Cite web |last=Kent |first=Lauren |title=The future of Iran’s internet connectivity is still bleak, even as weeks-long blackout begins to lift |url=https://www.cnn.com/2026/01/30/middleeast/iran-internet-blackout-censorship-intl |website=CNN |date=29 Jan 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260223025239/https://www.cnn.com/2026/01/30/middleeast/iran-internet-blackout-censorship-intl |archive-date=23 Feb 2026}}</ref>
 
Individuals who lose access to their Google accounts (for example, as a result of losing an authentication factor) would no longer be able register new applications.<ref>{{Cite web |last=Voit |first=Karl |title=You Can't Control Your Data in the Cloud |url=https://karl-voit.at/cloud/ |website=Karl Voit |date=12 Nov 2016 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260604054416/https://karl-voit.at/cloud/ |archive-date=4 Jun 2026}}</ref> Unlimited offline distribution can also become a thing of the past. Google can impose arbitrary installation quotas, meaning limit the number of installations, like they are planning to do with [[#Limited_distribution|student accounts]]. In the future, Google can also stop accepting submissions for older Android versions altogether, forcing people to purchase new devices to run software that could technically run on their existing device.
 
As with any Google service, there exists a possibility that it will shut down entirely, given that Google has a long history of launching and shutting down experimental services.<ref>{{Cite web |author= |title=Dead Google products |url=https://gcemetery.co/ |website=The Google Cemetery |date= |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20260221111719/https://gcemetery.co/ |archive-date=21 Feb 2026}}</ref><ref>{{Cite web |author= |title=Google Graveyard |url=https://killedbygoogle.com/ |website=Killed by Google |date= |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20260221152454/https://killedbygoogle.com/ |archive-date=21 Feb 2026}}</ref> If Google shut down the Android Developer Console, no one could develop new Android application anymore, for any device sold with this verification requirement built in.


==Background==
==Background==
On the Android mobile operating system, the user can, currently, freely install applications developed by anyone, with no kinds of penalty as to their origin, feature set or purpose. The only requirements is that the application follows the technical guidelines, that ensure that the application will be functional on the device, and is signed with any kind of certificate, which is required to maintain a chain of trust during application updates.
Android has historically allowed users to freely install applications from any source through APK files (sometimes called [[sideloading]]). This openness differentiated Android from competitors like iOS. It enabled alternative app repositories, including open-source repositories like [[F-Droid]], and direct developer-to-user distribution, offline installation with no Internet connection and Google account required, installation of applications not available in the Play Store (such as ''Flappy Bird'', after it was taken down by its developer, or ''TubeMate'', which Google does not allow on the Play Store), and installation of earlier versions (such as non-adware versions of ''ES File Explorer'').


==Introduction of Developer Verification==
The only technical requirements were that applications follow Android's technical guidelines for functionality and be signed with any certificate to maintain a chain of trust during updates.
On August 25th 2025, Google has released<ref>{{Cite web |date=2025-08-25 |title=Android developer console {{!}} Android developer verification {{!}} Android Developers |url=https://developer.android.com/developer-verification |archive-url=https://web.archive.org/web/20250825180832/https://developer.android.com/developer-verification |archive-date=2025-08-25 |access-date=2025-08-25}}</ref> a roadmap of a new requirement for application installations called the Developer Verification, which will require developers to register on the Android Developer Console, if they want their applications to be installable after the roll out of this system. When registering, the developers are offered a choice<ref>{{Cite web |date=2025-08-25 |title=Android developer verification {{!}} Android Developers |url=https://developer.android.com/developer-verification/guides/android-developer-console |archive-url=https://web.archive.org/web/20250825204008/https://developer.android.com/developer-verification/guides/android-developer-console |archive-date=2025-08-25 |access-date=2025-08-25}}</ref> between "Limited" and "Full" distribution types. The "Limited" distribution type is considered by Google to be best for "students, hobbyists, and other personal use", and is free to register, unlike the "Full" distribution type, which is considered to be suited for "organizations and professional developers with wide distribution". The "Limited" type is stated to have a "capped number of apps and installs", unlike the "Full" type. It is currently unclear whether or not the "Limited" type requires any kind of identity verification, as opposed to "Full", which requires full identity verification, as stated by Google.
 
This openness has been a defining characteristic of Android since its inception, supporting many different use cases from enterprise deployments to privacy-focused distributions. Google has defended this approach in anti-trust proceedings, with Google's lawyers arguing in the [[Epic Games]] case that "Android and Google Play provide more choice and openness than any other major mobile platform"<ref>{{Cite web |last=Hatmaker |first=Taylor |title=Fortnite maker Epic Games wins its antitrust fight against Google |url=https://techcrunch.com/2023/12/11/epic-games-google-antitrust-win/ |website=TechCrunch |date=11 Dec 2023 |access-date=29 Aug 2025 |url-status=live |archive-url=http://web.archive.org/web/20251126195055/https://techcrunch.com/2023/12/11/epic-games-google-antitrust-win/ |archive-date=26 Nov 2025}}</ref> and that the company's app store practices were ''"part of its fierce competition with Apple"''.<ref>{{Cite web |last1=De Vynck |first1=Gerrit |last2=Dou |first2=Eva |title=Epic Games wins antitrust lawsuit against Google |url=https://www.washingtonpost.com/technology/2023/12/11/epic-google-trial-verdict/ |website=The Washington Post |date=12 Dec 2023 |access-date=29 Aug 2025 |url-status=live |archive-url=http://web.archive.org/web/20250723224500/https://www.washingtonpost.com/technology/2023/12/11/epic-google-trial-verdict/ |archive-date=23 Jul 2025}}</ref>
 
==Announcement and rationale==
Google announced the Developer Verification requirements on August 25, 2025, through the Android Developers Blog.<ref>{{Cite web |last=Frey |first=Suzanne |title=A new layer of security for certified Android devices |url=https://android-developers.googleblog.com/2025/08/elevating-android-security.html |website=[[Google]] |date=25 Aug 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20250825180832/https://android-developers.googleblog.com/2025/08/elevating-android-security.html |archive-date=25 Aug 2025}}</ref> According to Suzanne Frey, VP of Product, Trust & Growth for Android, the system is designed to combat malicious actors who ''"hide behind anonymity to harm users by impersonating developers and using their brand image to create convincing fake apps."''
 
Google cited security statistics showing ''"over 50 times more malware from internet-sideloaded sources than on apps available through Google Play"''.<ref>{{Cite web |last=Li |first=Abner |title=Google will require developer verification to install Android apps, including sideloading |url=https://9to5google.com/2025/08/25/android-apps-developer-verification |website=9to5Google |date=25 Aug 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20260119211442/https://9to5google.com/2025/08/25/android-apps-developer-verification/ |archive-date=19 Jan 2026}}</ref> The company framed the verification as ''"an ID check at the airport, which confirms a traveler's identity but is separate from the security screening of their bags"''.
 
===Implementation timeline===
The implementation will be conducted in global rollout phases:<ref name=":0">{{Cite web |author= |title=Register on Android Developer Console |url=https://developer.android.com/developer-verification/guides/android-developer-console |website=[[Android]] |date=25 Aug 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20250825204008/https://developer.android.com/developer-verification/guides/android-developer-console |archive-date=25 Aug 2025}}</ref>
 
*'''October 2025:''' Early access opens for invited developers
*'''March 2026:''' Open to all developers
*'''September 2026:''' Enforcement begins in Brazil, Indonesia, Singapore, and Thailand
*'''2027 and beyond:''' Global rollout continues
 
Key implementation details:
*No grandfather clauses for existing apps or developers
*[[Google Play Store]] developers likely already meet requirements through 2023's D-U-N-S implementation
*Organizations requiring D-U-N-S numbers should begin the process 28 days before deadlines
*Developers can initiate verification 60 days before enforcement
*90-day deadline extensions available for developers needing additional time
*After deadlines, users encounter system-level blocks with no override option when attempting to install unverified apps
 
===Updates===
On November 12, 2025, Google announced that it was developing an ''"building a new advanced flow that allows experienced users to accept the risks of installing software that isn't verified."''<ref>{{Cite web |last=Forsythe |first=Matthew |title=Android developer verification: Early access starts now as we continue to build with your feedback |url=https://android-developers.googleblog.com/2025/11/android-developer-verification-early.html |website=[[Google]] |date=12 Nov 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20260221030624/https://android-developers.googleblog.com/2025/11/android-developer-verification-early.html |archive-date=21 Feb 2026}}</ref>. Matthew Forscythe, the Director of Product Management, clarified in a tweet posted January 16, 2026 that the process was purposefully ''"high-friction"'' and re-framed the sideloading restriction as an ''"accountability layer."''<ref>{{Cite web |last=Forscythe |first=Matthew |title=Matthew Forscythe on X |url=https://x.com/matt_w_forsythe/status/2012293577854930948 |website=[[X]] |date=16 Jan 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=https://ghostarchive.org/archive/REESc |archive-date=9 Jun 2026 |quote=It’s not a sideloading restriction, but an "Accountability Layer." 🛡️ Advanced users will be able to"Install without verifying," but expect a high-friction flow designed to help users understand the risks.}}</ref><ref>{{Cite web |last=Schoon |first=Ben |title=Google calls Android’s new sideloading flow ‘high friction’ |url=https://9to5google.com/2026/01/19/google-calls-androids-new-sideloading-flow-high-friction/ |website=9to5Google |date=19 Jan 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20260120014243/https://9to5google.com/2026/01/19/google-calls-androids-new-sideloading-flow-high-friction/ |archive-date=20 Jan 2026}}</ref>
 
Free and open software distributor, [[F-Droid]], stated in a blog post that the Android Developer program remained a credible threat to the open-source ecosystem on Android. They also added a banner at the top of their website that linked to "[https://keepandroidopen.org/ Keep Android Open]", a website for informing about the danger and recommending users to voice their concerns to the relevant authority.<ref>{{Cite web |author= |title=TWIF curated on Friday, 20 Feb 2026, Week 8 |url=https://f-droid.org/en/2026/02/20/twif.html |website=[[F-Droid]] |date=20 Feb 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260223025319/https://f-droid.org/en/2026/02/20/twif.html |archive-date=23 Feb 2026}}</ref>
 
On February 24, 2026, the Keep Android Open movement published an open letter to [[Google]] signed by various free and open-source software organizations, digital rights groups, and developer communities.<ref>{{Cite web |author= |title=An Open Letter to Google regarding Mandatory Developer Registration for Android App Distribution |url=https://keepandroidopen.org/open-letter/ |website=Keep Android Open |date=24 Feb 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260224172459/https://keepandroidopen.org/open-letter/ |archive-date=24 Feb 2026}}</ref> The letter criticized:
 
*The need for Google to gate-keep software beyond its own distribution platform
*The centralization of power having implications for privacy, censorship, and surveillance, especially with Google's historically opaque decision-making and review approach
*Imposition of barriers to entry for developers in various scenarios
*Anti-competitive implications
*Regulatory concerns
 
F-Droid was among the various organizations to sign the letter, as well as publishing its own open letter that same day. In that open letter F-Droid contended that "sideloading" was still going to be removed, that Google's blog post from last November about an "advanced flow" would not ''"be made available prior to the September lock-down,"'' nor had Google sought any external feedback. F-Droid went on to urge developers to signal their own opposition by refusing to sign up for the developer verification process that would begin in March 2026.<ref>{{Cite web |author=marcprux |title=An Open Letter Opposing Android Developer Verification |url=https://f-droid.org/en/2026/02/24/open-letter-opposing-developer-verification.html |website=[[F-Droid]] |date=24 Feb 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260224172628/https://f-droid.org/en/2026/02/24/open-letter-opposing-developer-verification.html |archive-date=24 Feb 2026}}</ref>
 
On March 4, 2026, as part of changes following the ruling in ''Epic Games, Inc. v. Google LLC, et al.'', Google announced that it was allowing registered app stores to be published on [[Google Play Store]] if they met ''"certain quality and safety benchmarks"'', which would otherwise be subject to same restrictions as those for other "sideloaded" apps.<ref>{{Cite web |last=Samat |first=Sameer |title=A new era for choice and openness |url=https://android-developers.googleblog.com/2026/03/a-new-era-for-choice-and-openness.html |website=[[Google]] |date=4 Mar 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260305062940/android-developers.googleblog.com/2026/03/a-new-era-for-choice-and-openness.html |archive-date=5 Mar 2026}}</ref> Notably as part of the settlement, Epic Games signed away its rights to sue Google over anything related as covered in the term sheet, until September 2032.<ref>{{Cite web |last=Hollister |first=Sean |title=Tim Sweeney signed away his right to criticize Google’s app store until 2032 |url=https://www.theverge.com/news/889595/tim-sweeney-signed-away-his-right-to-criticize-google-until-2032 |website=The Verge |date=5 Mar 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260305000517/www.theverge.com/news/889595/tim-sweeney-signed-away-his-right-to-criticize-google-until-2032 |archive-date=5 Mar 2026}}</ref>
 
===The "advanced flow"===
On March 19 2026, Google finally revealed how its advanced flow program for installing unverified apps would be implemented. Google mentioned that this was a one-time process for power users, but was designed to prevent users ''"from being coerced by high pressure tactics to install malicious software"''.<ref>{{Cite web |last=Forsythe |first=Matthew |title=Android developer verification: Balancing openness and choice with safety |url=https://android-developers.googleblog.com/2026/03/android-developer-verification.html |website=[[Google]] |date=19 Mar 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260319202706/android-developers.googleblog.com/2026/03/android-developer-verification.html |archive-date=19 Mar 2026}}</ref>
 
#'''Enable developer mode in system settings'''
#'''Confirm you aren't being coached'''
#'''Restart your phone and r-eauthenticate'''
#'''Come back after the protective waiting period and verify -''' One-time, one-day wait
3'''Install apps -''' option of enabling for 7 days or indefinitely
 
Since advanced flow is delivered through Google Play Services and not through Android OS, Google can modify, restrict, or remove it at any time without an OS update and without any user consent. Organizations such as Keep Android Open continue to hold the position against the program because of this aspect. Since the implementation has not appeared in dev, beta or canary builds of Android yet, Google is prompting the community to accept a product announcement as a functional safeguard five months before the mandate takes effect.
 
Preventing critical banking apps from functioning due to enabled state of developer mode also makes installing unverified applications unfeasible to many users, which majorly affects the rapidly growing FOSS Android community and forces developer verification as well as payment of verification fees to Google, only to operate under limitations Google grants.
 
On March 23, 2025, Matthew Forsythe, Director of Product Management for Developer Experience on Google Play at Google, answered a question from an Android user on [[X]] (formerly Twitter)  regarding advanced flow on Android. Forsythe explained that it would be possible to disable developer node once advanced flow is enabled, in order to use apps that don't work with developer mode enabled such as banking apps.{{Citation needed|date=8 June 2026}}
 
However, at present, it's not yet clear whether it will actually be possible to use advanced flow with Developer Mode disabled, and it is unknown if enabling advanced flow will affect critical apps like banking apps, which might not function properly if the Advanced Feed system is enabled.
 
==Technical implementation==
===Distribution types===
The Developer Verification system creates two tiers of developer accounts:<ref name=":0" />
 
====Limited distribution====
*Allows for distribution on up to 20 devices<ref>{{Cite web |author= |title=Android Developer Console: Account creation form |url=https://get.google.com/adc-early-access/u/0/onboarding |website=[[Google]] |date= |access-date=8 Jun 2026 |url-status=live
|archive-url=<!-- Cannot archive by normal means. May need to upload a screenshot and then archive the CRW file page. -Sojourna -->
|archive-date=
}}</ref>
*Intended for ''"students, hobbyists, and other personal use"''
*Free registration
*Identity verification requirements unclear
 
====Full distribution====
*No limits on app numbers or installations
*Intended for ''"organizations and professional developers with wide distribution"''
*Requires a one-time $25 fee
*Requires complete identity verification including:
**Government-issued photo ID
**Proof of address
**Private email
**Phone number
**For organizations:
***Website
***D-U-N-S number (can take up to 28 days to obtain)
 
===Package name registration===
Developers must register package names before apps can be installed. The system creates a cryptographic link between developer identity and app signing keys. Ownership priority is determined by installation statistics — developers whose signing keys account for over 50% of known installs receive registration priority.<ref>{{Cite web |author= |title=Updates to Play Console for Android developer verification: A first look |url=https://developer.android.com/developer-verification/assets/pdfs/updates-to-play-console-for-android-developer-verification.pdf <!-- New URL, but dated March 2026: https://developer.android.com/static/developer-verification/guides/pdf-guides/pdc-guide.pdf --> |website=[[Android]] |date=25 Aug 2025 |access-date=28 Jan 2026 |url-status=dead |archive-url=http://web.archive.org/web/20260128020558/https://developer.android.com/developer-verification/assets/pdfs/updates-to-play-console-for-android-developer-verification.pdf |archive-date=28 Jan 2026 |format=PDF}}</ref><ref>{{Cite web |author= |title=Resources {{!}} Android developer verification |url=https://developer.android.com/developer-verification/guides/resources |website=[[Android]] |date=25 Aug 2025 |access-date= |url-status=dead |archive-url=http://web.archive.org/web/20251123194919/https://developer.android.com/developer-verification/guides/resources |archive-date=23 Nov 2025}}</ref>
 
===Affected devices===
The requirements apply to all ''"[ Google-certified Android devices]"'' which includes:<ref>{{Cite web |author= |title=Certified Partners |url=https://www.android.com/certified/partners/ |website=[[Android]] |date= |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260416074354/https://www.android.com/certified/partners/ |archive-date=16 Apr 2026}}</ref>
*Devices with Google Play Store
*Devices with [[Google Mobile Services]] (GMS)
*Devices with Play Protect
*All mainstream Android devices from manufacturers including Samsung, Xiaomi, Motorola, OnePlus, and Google Pixel
*The vast majority of Android devices sold outside of China
 
Custom ROMs without Google services and non-certified devices are not affected by these restrictions.
 
==Developer response==
===Technical concerns===
Prominent Android developer Mark Murphy (CommonsWare) raised several technical concerns:<ref>{{Cite web |author= |title=Uncomfortable Questions About Android Developer Verification |url=https://commonsware.com/blog/2025/08/26/uncomfortable-questions-android-developer-verification.html |website=CommonsWare |date=29 Aug 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20251121201157/https://commonsware.com/blog/2025/08/26/uncomfortable-questions-android-developer-verification.html |archive-date=21 Nov 2025}}</ref>
*Debug keystore handling for development workflows remains unaddressed
*Sample code from Android development books would become unusable as ''"at most one person on the entire planet"'' could register each package name
*Beta testing workflows using different package names face complications
*Questions whether "it will no longer be possible to test apps under development on Google-certified production hardware" after 2027
 
===Privacy and safety concerns===
Developers expressed significant privacy concerns:
 
*Murphy cited the ICEBlock app developer who faced federal prosecution threats after identity disclosure, with his wife being fired from a job at the U.S. Department of Justice
 
*The Electronic Frontier Foundation (EFF) criticized risks of centralization in censorship as well as surveillance capability retained by Google<ref>{{Cite web |last=McSherry |first=Corynne |title=Application Gatekeeping: An Ever-Expanding Pathway to Internet Censorship |url=https://www.eff.org/deeplinks/2025/11/application-gatekeeping-ever-expanding-pathway-internet-censorship |website=Electronic Frontier Foundation |date=3 Nov 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20251111101548/https://www.eff.org/deeplinks/2025/11/application-gatekeeping-ever-expanding-pathway-internet-censorship |archive-date=11 Nov 2025}}</ref>
 
*Google's privacy policy allows sharing developer information with ''"trusted businesses or persons"'' without clear restrictions<ref name="its-foss">{{Cite web |last=Rudra |first=Sourav |title=Android Security or Vendor Lock-In? Google's New Sideloading Rules Smell Fishy |url=https://news.itsfoss.com/new-android-sideloading-rules/ |website=It's FOSS |date=29 Aug 2025 |access-date=8 Jun 2025 |url-status=live |archive-url=http://web.archive.org/web/20251107074008/https://news.itsfoss.com/new-android-sideloading-rules/ |archive-date=7 Nov 2025}}</ref>
 
*Open source developers fear harassment and doxxing after forced identity disclosure
 
*F-Droid mentioned that play store verification is proven to be ineffective at combating malware due to repeated instances of malware distributed through play store<ref>{{Cite web |last=Arntz |first=Pieter |title=224 malicious apps removed from the Google Play Store after ad fraud campaign discovered |url=https://www.malwarebytes.com/blog/news/2025/09/224-malicious-apps-removed-from-the-google-play-store-after-ad-fraud-campaign-discovered |website=Malwarebytes |date=17 Sep 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20251005173848/www.malwarebytes.com/blog/news/2025/09/224-malicious-apps-removed-from-the-google-play-store-after-ad-fraud-campaign-discovered |archive-date=5 Oct 2025}}</ref><ref>{{Cite web |last=Thompson |first=Iain |title=Malware-ridden apps made it into Google's Play Store, scored 19 million downloads |url=https://www.theregister.com/2025/08/26/apps_android_malware/ |website=The Register |date=26 Aug 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20251005173850/www.theregister.com/2025/08/26/apps_android_malware/ |archive-date=5 Oct 2025}}</ref>
 
===Open source community impact===
Specific challenges include:
*F-Droid builds apps from source with its own signing keys, creating coordination requirements with upstream developers to ensure that the applications distributed are reproducible
*Community estimates suggest 85% of F-Droid apps could be "stuck in limbo" due to package ID conflicts
*Some developers announced via DreeDroidWarn that their apps "will no longer work on certified Android devices after that time"<ref>{{Cite web |author=woheller69 |title=FreeDroidWarn |url=https://github.com/woheller69/FreeDroidWarn |website=[[GitHub]] |date= |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260605073559/https://github.com/woheller69/FreeDroidWarn |archive-date=5 Jun 2026}}</ref>
*An open source app, Kotatsu, shut down its development citing pressure from Google against sideloading (among other threats against its operation).<ref>{{Cite web |author= |title=KotatsuApp/Kotatsu: Manga reader for android |url=https://github.com/KotatsuApp/Kotatsu |website=[[GitHub]] |date= |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20251105185519/github.com/KotatsuApp/Kotatsu |archive-date=5 Nov 2025}}</ref>
 
==Consumer response==
Google's Q&A page for the announcement received lots of feedback, including:<ref>{{Cite web |last=Y. |first=Grace |title=Q&A: New Android developer verification requirements |url=https://support.google.com/googleplay/android-developer/thread/361325854 |website=[[Google]] |date=25 Aug 2026 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20250829100055/https://support.google.com/googleplay/android-developer/thread/361325854/%F0%9F%92%AC-q-a-new-android-developer-verification-requirements |archive-date=29 Aug 2025}}</ref>
 
*Users highlighting the hypocrisy of enforcing security on sideloaded apps while Google Play distributes apps classified as scamware, malware, and adware
 
*Confusion over whether users would need to pay $25 to install apps on their own devices
 
*Concerns about offline device functionality (barcode scanners, kiosks) requiring internet connections for app signing verification
 
*Comparisons to [[Microsoft Windows|Windows]], where users noted: "I can install an app onto a Windows computer from any source without verification by Microsoft"<ref>{{Cite web |last=Anderson
|first=Tim |title=Google to restrict Android app sideloading to verified devs |url=https://www.theregister.com/2025/08/26/android_developer_verification_sideloading |website=The Register |date=26 Aug 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20260119211440/https://www.theregister.com/2025/08/26/android_developer_verification_sideloading/ |archive-date=19 Jan 2026}}</ref>
 
The Android community produced numerous critical videos,<ref>{{Cite web |last=Mental Outlaw |date=2025-08-29 |title=Google is Locking Down Android |url=https://www.youtube.com/watch?v=L1S0SiBuJN8 |access-date=2025-08-29 |website=YouTube |url-status=live |archive-url=https://preservetube.com/watch?v=L1S0SiBuJN8 |archive-date=16 Feb 2026}}</ref><ref>{{Cite web |last=BrenTech |date=2025-08-26 |title=Google Will Soon Block Apps from Unverified Developers! Is This The End of Sideloading on Android? |url=https://www.youtube.com/watch?v=-nCgnXByGrY |access-date=2025-08-29 |website=YouTube |archive-url=https://preservetube.com/watch?v=-nCgnXByGrY |archive-date=23 Feb 2026}}</ref><ref>{{Cite web |last=TechLore |date=2025-08-27 |title=Android Is Becoming iOS: The End of Sideloading? |url=https://www.youtube.com/watch?v=PxGjwtiI8uM |access-date=2025-08-29 |website=YouTube |url-status=live |archive-url=https://preservetube.com/watch?v=PxGjwtiI8uM |archive-date=16 Feb 2026}}</ref> with titles like "Google is Locking Down Android" and "Android Is Becoming iOS: The End of Sideloading?"
 
==Industry and organizational response==
===Support===
The Developers Alliance stood as the sole organizational voice supporting the change, with co-founder Jake Ward stating it was ''"a critical step to ensure trust, accountability, and security across the Android ecosystem"''.<ref>{{Cite web |author= |title=Developers Alliance Applauds Google's New Android Developer Verification |url=https://news.devalliance.org/developers-alliance-applauds-googles-new-android-developer-verification/ |website=Developers Alliance |date=25 Aug 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20251029120724/https://news.devalliance.org/developers-alliance-applauds-googles-new-android-developer-verification/ |archive-date=29 Oct 2025}}</ref>
 
Government support emerged from initial rollout regions:
 
*Brazil's Federation of Banks called it a ''"significant advancement in protecting users"''{{Citation needed|date=8 June 2026}}
 
*Indonesia's Ministry of Communications praised the ''"balanced approach that protects users while keeping Android open"''{{Citation needed|date=8 June 2026}}
 
*Thailand's Ministry of Digital Economy described it as a ''"positive and proactive measure"''{{Citation needed|date=8 June 2026}}
 
===Criticism===
Technology publications characterized the change as fundamental to Android's nature:
 
*The Daily Security Review called it ''"a significant philosophical shift for Android, mirroring Apple's tightly curated ecosystem"''{{Citation needed|date=8 June 2026}}
 
*Cory Doctorow wrote that Google was abusing its duopoly position in the mobile ecosystem to lock-in users for monetary profit<ref>{{Cite web |last=Doctorow |first=Cory |title=Darth Android |url=https://pluralistic.net/2025/09/01/fulu/ |website=Pluralistic |date=1 Sep 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20251012004854/pluralistic.net/2025/09/01/fulu/ |archive-date=12 Oct 2025}}</ref>
 
*Many news outlets warned that the ID requirements could end alternative app stores and affirm [[Google Play Store]]'s position as an effective monopoly<ref>{{Cite web |author=Debasish |title=Google’s new developer rules could threaten sideloading and F-Droid’s future |url=https://www.gizmochina.com/2025/09/30/googles-new-developer-rules-could-threaten-sideloading-and-f-droids-future/ |website=GizmoChina |date=30 Sep 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20251102075559/www.gizmochina.com/2025/09/30/googles-new-developer-rules-could-threaten-sideloading-and-f-droids-future/ |archive-date=2 Nov 2025}}</ref><ref>{{Cite web |last=Mous |first=Anton |title=Google’s developer registration ‘decree’ means the end for alternative app stores |url=https://cybernews.com/tech/googles-developer-registration-decree-end-alternative-app-stores/ |website=cybernews |date=30 Sep 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20251111111050/https://cybernews.com/tech/googles-developer-registration-decree-end-alternative-app-stores/ |archive-date=11 Nov 2025}}</ref>
 
*Afam Onyimadu, of Make Use Of, wrote that the move was an overreach of Google's position when programs such as Play Protect already exist, calling it ''"security theatre"''<ref>{{Cite web |last=Onyimadu |first=Afam |title=Android’s sideloading limits are its most anti-consumer move yet |url=https://www.makeuseof.com/androids-sideloading-limits-are-anti-consumer-move-yet/ |website=Make Use Of |date=11 Oct 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20251012005122/www.makeuseof.com/androids-sideloading-limits-are-anti-consumer-move-yet/ |archive-date=12 Oct 2025}}</ref>
 
*It's FOSS warned ''"this could turn Google into the effective gatekeeper for all apps on 'certified' Android devices"''<ref name="its-foss" />
 
*OSnews criticized it as ''"the death of our digital freedoms"''{{Citation needed|date=8 June 2026}}
 
*Hackaday noted the timing ''"coincides with Google's court-mandated opening of Android following Epic Games' antitrust victory"''<ref>{{Cite web |last=Posch |first=Maya |title=Google Will Require Developer Verification Even For Sideloading |url=https://hackaday.com/2025/08/26/google-will-require-developer-verification-even-for-sideloading/ |website=Hackaday |date=26 Aug 2025 |access-date=29 Aug 2025 |url-status=live |archive-url=http://web.archive.org/web/20260203082923/https://hackaday.com/2025/08/26/google-will-require-developer-verification-even-for-sideloading/ |archive-date=3 Feb 2026}}</ref>
 
==Impact on specific use cases==
===Enterprise and MDM deployments===
NomidMDM advised IT managers to ''"audit application inventory today"'' and make sure all line-of-business app developers completed verification before deadlines.<ref>{{Cite web |last=Ponces |first=David |title=The Core Change: Mandatory Verification for All Android Apps |url=https://www.nomidmdm.com/en/blog/the-core-change-mandatory-verification-for-all-android-apps |website=NomidMDM |date=27 Aug 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20251209230703/https://www.nomidmdm.com/en/blog/the-core-change-mandatory-verification-for-all-android-apps |archive-date=9 Dec 2025}}</ref> Affected deployments include:
*Wall-mounted displays
*Classroom broadcasting systems
*Shared device configurations
*Kiosk applications
*Industrial control systems
 
===Alternative app stores===
F-Droid faces serious challenges with the repository's build-from-source model conflicting with developer verification requirements. Alternative stores must make sure all hosted apps come from verified developers, effectively extending Google's verification to all distribution channels.
 
===Educational development===
Educational institutions face challenges as well:{{Citation needed|date=8 June 2026}}
*Student projects require individual verification for testing
*Sample code from textbooks becomes unusable without verification
*Classroom demonstrations need verified developer accounts
*Research projects face additional identity disclosure requirements
 
==Regulatory context==
The announcement arrived during active regulatory scrutiny of Google's platform practices.
 
===European Union===
The EU [[Digital Markets Act]] investigation issued preliminary findings against Google on March 19, 2025, for self-preferring and payment system restrictions.<ref>{{Cite web |last=Lomas |first=Natasha |title=Google Search, Play Store falling foul of Digital Markets Act rules, says EU |url=https://techcrunch.com/2025/03/19/google-search-play-store-falling-foul-of-digital-markets-act-rules-says-eu/ |website=TechCrunch |date=19 Mar 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20251123150559/https://techcrunch.com/2025/03/19/google-search-play-store-falling-foul-of-digital-markets-act-rules-says-eu/ |archive-date=23 Nov 2025}}</ref> Legal experts noted potential conflicts with DMA provisions requiring gatekeepers to permit third-party software installation without the gatekeeper's identification services.
 
===United States of America===
The timing coincided with court-mandated changes following Epic Games' antitrust victory. The FTC outlined remedy concerns in an August 2024 ''amicus'' brief after the jury found Google illegally monopolized app distribution.<ref>{{Cite web |author= |title=FTC Outlines Remedy Concerns in Amicus Brief After Jury Finds Google Illegally Monopolized App Store |url=https://www.ftc.gov/news-events/news/press-releases/2024/08/ftc-outlines-remedy-concerns-amicus-brief-after-jury-finds-google-illegally-monopolized-app-store |website=[[Federal Trade Commission]] |date=29 Aug 2024 |access-date=8 Jun 2026 |url-status=live |archive-url=http://web.archive.org/web/20260116072044/https://www.ftc.gov/news-events/news/press-releases/2024/08/ftc-outlines-remedy-concerns-amicus-brief-after-jury-finds-google-illegally-monopolized-app-store |archive-date=16 Jan 2026}}</ref>
 
===United Kingdom===
The UK Competition and Markets Authority continued its Strategic Market Status investigation, with consultation closing on August 20, 2025.<ref>{{Cite web |author= |title=SMS investigation into Google's mobile platform |url=https://www.gov.uk/cma-cases/sms-investigation-into-googles-mobile-ecosystem |website=Gov.UK |date=23 Jan 2025 |access-date=8 Jun 2026 |url-status=live |archive-url=https://web.archive.org/web/20260609052539/https://www.gov.uk/cma-cases/googles-mobile-platform |archive-date=9 Jun 2026}}</ref> No specific response to the verification requirements has been issued as of June 8, 2026.
 
==See also==
*[[Forced account]]
*[[Digital Markets Act]]
*[[Sideloading]]


==References==
==References==
{{reflist}}
{{Reflist}}
 
==External links==
*[https://developer.android.com/ Android Mobile App Developer Tools - Android Developers]
*[https://f-droid.org/ F-Droid]
*[https://keepandroidopen.org/ Keep Android Open]


[[Category:Android]]
[[Category:Android]]
Retrieved from "https://consumerrights.wiki/w/Android_Developer_Verification"