Google Tightens Control Over Android App Installations: New Protocols Unveiled
In a move reflecting its ongoing concerns about security, Google is implementing stricter measures regarding the installation of Android applications from sources other than the Play Store. Last year, the tech giant proposed a framework requiring all applications to be signed by verified developers, with identity checks aligned to a Google-managed directory. Following a significant backlash, Google has introduced an “advanced flow” for the installation of unsigned APKs, detailing how this process will work.
Under the updated guidelines, users will no longer have a straightforward option to enable installations from “unknown sources.” Instead, they will need to navigate to the Developer Options menu and toggle the “Allow Unverified Packages” setting. This action will initiate a mandatory “security delay” of 24 hours following a device restart, post which users may enable the setting either temporarily or permanently. The intent behind these measures appears to be the prevention of malicious app installations through coercion, although the effectiveness of this approach remains to be seen.
Previously, this “advanced flow” had been introduced as a compromise, along with an offer of a limited free developer account permitting up to 20 device installations. Developers aiming for broader reach will be required to pay a fee of $25 and provide valid government identification for verification.
While Google markets these changes as enhancements for user security, they also significantly impact third-party app stores and developers. Those publishing on alternate platforms will now be subject to these same verification requirements, compelling Android users to quickly familiarize themselves with the new settings as they roll out across various countries in the coming months.
Critics argue that these stringent protocols may not fully address security concerns, as scammers could simply acquire already-verified developer accounts. Moreover, the restrictions could stifle third-party app stores and independent developers who depend on the capability to distribute their applications via direct APK downloads.
Source: Original Source
