Google is preparing a significant shake-up for how apps land on Android phones. A new rule will take effect for certified Android devices starting October 2025. From then on, users will only be able to install apps from developers who have registered with Google and passed an identity check. This applies even to apps installed from APK files or other app stores outside Google Play.
These new rules will use a system known as the Android Developer Console. It aims to support developers who publish their apps without using the Google Play Store. Through this system, developers can register their apps and receive a special identification code. Google plans to offer different account types for this process. These include options for individual developers, students, general users, and commercial organizations.
The rollout of this policy will happen in stages. It will first become mandatory in Brazil, Indonesia, Singapore, and Thailand by September 2026. After that, it will expand to other countries throughout 2027. Phone manufacturers whose devices are certified, meaning they include Google Mobile Services and Google Play Protect, must add more verification steps for app installations. However, Android Open Source Project (AOSP) versions or custom forks that do not include Google services may still allow installation of apps from unverified developers, just like they do now.
Google says this change is all about making Android safer. The company aims to cut down on harmful apps spreading across the ecosystem. Google claims that external app sources are 50 times more risky than its own Play Store. Many of these dangerous apps trick people into downloading APK files from unofficial places.
What Developers Need to Do
Good news for many developers: If you already publish your apps on Google Play, you likely won’t need to do anything extra. Google made identity verification a requirement for Play Store submissions back in 2023. Apps that have already gone through this process can still be installed through other channels, like APK files or different app stores.
Therefore, these new rules specifically impact developers whose apps are not available on Google Play.
The identity verification process for these developers has two main steps:
- First, you’ll submit and verify personal information. This includes your full name, address, email, and phone number. Individual developers might need to upload a photo of a government-issued ID. Organizations will need to verify their website and provide a DUNS number.
- Second, you’ll register your app. Developers must identify their application and confirm their ownership. This is done using the app’s unique package name and its digital key.
You can find more detailed information directly on the Android Developers Blog.
This change means that any app not found on Google Play will not install on certified Android devices. For example, the 1by1 multimedia player app is only available as an APK file, not on Google Play. It would be affected. Some apps from F-Droid, an alternative app store, might also face similar restrictions.
Finally, this shift could also affect app stores run by phone brands, such as the Huawei App Gallery or the Samsung Galaxy Store. Major APK distribution services like APKPure and APKMirror will also be impacted if the apps they host are not registered and certified by Google.