Google Play regularly gets new features, but they typically do not impact the Android ecosystem broadly, just customers who use these services. Now, Google is making a major change to how apps are distributed and consumed by Android users through a new security practice.
In a blog post, Google has announced that it is soon making developer verification mandatory for all apps that are installed on an Android device. Interestingly, this does not only cover Google Play apps (which already come from verified developers), but also sideloaded apps that typically come from other storefronts and web sources.
The company says that its main motivation behind this change is that its own analysis revealed that sideloaded apps from the internet have over 50 times more malware than Google Play applications. As such, Google will force developers to verify themselves in order for their apps to be installable on end-user devices. The firm believes that this verification of identity will create more trust and accountability, while restricting bad actors from exploiting anonymity.
It is important to note that developer verification does not include verifying the content of the app being distributed, which means that it is still possible for malware to reach Android devices through a verified developer. It"ll just be easier for the Mountain View company to identify a bad actor this way and potentially stop them from spreading further harm.
To implement this requirement, Google will create a dedicated and separate Android Developer Console, intended for developers who want to distribute their apps outside of Google Play. Similarly, a console will also be enabled for students and hobbyists who are just creating and testing apps on their own personal devices.
It is worth highlighting that this mandatory requirement only applies to "certified" Android devices, which means handsets which have Play Protect enabled. Google will kick off an early access program in October 2025, followed by a public verification process in March 2026. In September 2026, a preview of enforcing this requirement will begin in Brazil, Indonesia, Singapore, and Thailand, with global expansion planned for 2027 and beyond.