Google announced that it has implemented a new process for installing third-party unverified apps in response to community feedback. Android, which will be in effect after the introduction of mandatory registration of developers and applications in certified assemblies AndroidThe method introduces a 24-hour waiting period after enabling the developer option, which allows the installation of apps from manually downloaded APK packages created by developers who have not registered the packages with Google and have not verified their personal information.
The algorithm for installing manually downloaded packages will be reduced to the following steps:
- To enable developer mode in Settings, tap the build number area on the About Phone page seven times. This will open the developer options section in Settings. Select "Allow Unverified Packages." This step will prevent accidental installations and make it more difficult for scammers to quickly install malicious packages sent to users.
- Confirmation that the user understands the risks and is acting on their own initiative, rather than following the advice or persuasion of others.
- Restart your smartphone and enter your screen unlock code. This step will prevent remote control of the installation process and prevent continuous monitoring of the user's actions on the phone.
- The option to install a manually downloaded package will be activated after 24 hours, giving the user time to realize they are under the influence of scammers. After 24 hours, the user must re-enter the settings and confirm that they intentionally activated the third-party package installation mode using a PIN or biometric authentication.
- After confirmation, you will be presented with two options: unlimited ability to install apps from unverified developers, or permission that is only valid for 7 days (after 7 days, you will need to repeat the verification process).
- Each time an unverified application is installed, the user will be shown a warning about the risks involved, which they must agree to by clicking the "Install Anyway" button.
In addition to the new method, the previously available option to install applications using the “adb” utility will also remain (Android Debug Bridge), which requires connecting the device to an external computer and enabling developer mode. There will also be the option to register a free account for enthusiasts and students, which works without identity verification but requires registration in Android Developer Console for each device on which the application can be installed, and is limited to 20 devices.
Let us remind you that Google is moving towards using certified Android- devices of registered applications from verified developers. To be verified, the developer must register with the service for a fee ($25). Android Developer Console, if they haven't already registered with Google Play, and provide information such as their full name, residential address, email, phone number, and a photo of their ID. Organizations will need to verify their website and provide a Digital Entity Identifier (DUNS). After registration, developers must add their apps and verify their authorship by providing full package names and digital signature keys. Verification will become mandatory in Brazil, Indonesia, Singapore, and Thailand in September 2026 and will be expanded to other countries in 2027.
Source: opennet.ru
