Google’s new Android sideloading rules move from paper to practice this month. The advanced installation flow the company first previewed in March, built around a mandatory 24-hour wait, is rolling out globally in August 2026, alongside a free developer account built for students and hobbyists. Nothing gets blocked yet.
The hard requirement, where an unregistered app simply will not install on a certified Android device, does not arrive until September 30, and even then only for people in Brazil, Indonesia, Singapore, and Thailand. What lands this month is the mechanism itself, built around a specific scenario: someone on the phone with a stranger telling them which security warning to ignore.
TL;DR: Google’s advanced sideloading flow and free limited distribution developer accounts launch globally in August 2026. The flow adds a one-time, 24-hour wait plus a phone restart before anyone can install an app from an unverified developer, a delay designed to interrupt phone scam coercion. Actual enforcement, where unregistered apps cannot install at all, begins September 30, 2026, and only in Brazil, Indonesia, Singapore, and Thailand at first.
How the new advanced flow actually works
The advanced flow is not a single warning screen. According to Google’s own developer verification blog, installing an app from an unverified developer now runs through five steps: turning on developer mode in system settings, confirming no one is coaching the installer through the process, restarting the phone and reauthenticating, waiting out a one-time 24-hour period, then verifying again with a fingerprint, face unlock, or PIN before the install completes.
That sequence is not arbitrary. Google built it around a 2025 Global Anti-Scam Alliance report showing 57% of adults worldwide experienced a scam in the past year, with losses totaling $442 billion. Phone scams typically keep the victim on a call, coaching them to tap through warnings before they can think.
A forced restart cuts off any live screen-sharing session. A 24-hour wait removes the urgency scammers depend on.
It is the same instinct behind Android 17’s default privacy changes, which quietly cut off broad contacts and network access for apps without asking first. Once someone clears the advanced flow, they can enable unverified installs for seven days or indefinitely, and the one-time setup does not repeat for future installs.
The Android sideloading rules timeline, from this month to next year
August 2026 is when the pieces actually launch. Free limited distribution accounts go live globally this month, letting hobbyists and students share an app with up to 20 devices without a government ID or fee. A full Android Developer Console account costs $25 a year and requires a D-U-N-S number for organizations, according to Google’s developer verification support page.
Enforcement starts September 30, 2026, and only in four countries. Apps distributed through Google Play, Samsung’s Galaxy Store, Xiaomi’s GetApps, HONOR App Market, OPPO App Market, vivo’s V-Appstore, and Transsion’s Palm Store must come from a registered developer to install in Brazil, Indonesia, Singapore, or Thailand. Everywhere else, including the US, the September deadline does not apply yet.
| Milestone | Date | What happens |
|---|---|---|
| System service rollout | June 2026 | Verification service installed quietly, no install impact |
| Advanced flow and free accounts | August 2026 | Both launch globally, no installs blocked yet |
| Enforcement begins | September 30, 2026 | Unregistered apps blocked in Brazil, Indonesia, Singapore, Thailand |
| Global expansion | 2027 | Requirement extends to all certified Android devices |
Google says it will expand the requirement globally in 2027 after gathering feedback from the pilot. More than 99% of apps on Google Play are already registered, according to the company’s June 2026 developer verification update, which has been verifying developers since March.
Sideloading is not going away, only the easy path for strangers
Power users lose nothing here. Android Debug Bridge still installs anything, verified or not, exactly as it always has. Google has said repeatedly that sideloading itself is not the target.
What changes is the default path for someone who does not know what ADB is. An app from a verified developer keeps installing the way it does today, one tap, no wait. An app from someone who never registered now runs through the advanced flow above, every time, unless the installer already completed the one-time setup.
The Play Store itself is going through a parallel shift, forced to host rival Android app stores inside its own listings after Google and Epic Games withdrew their 2025 settlement. That makes where an app comes from harder to track by habit alone, part of why Google is leaning on developer identity rather than storefront gatekeeping. Whether that actually slows scammers depends on how many route through legitimate storefronts to begin with, and that question stays open for now.
What actually changes on your Android phone this month
Nothing about this changes the experience for anyone who only installs from the Play Store. Verified developers, nearly all of Play, keep working exactly as before.
Sideloading occasionally, from an APK a developer sends directly or a marketplace outside Play, means meeting the advanced flow the first time after this rollout reaches a device. Budget a day for it. The 24-hour wait is the entire point, not a bug to route around.
US users are not under the September 30 deadline, but the infrastructure underneath developer verification has been arriving in pieces since June, and the global 2027 expansion means this eventually reaches every certified Android device. Getting familiar with the advanced flow now costs nothing and saves a confused day later.
