Google adds Advanced Flow to make APK sideloading safer on Android

Google has announced a new Android feature called Advanced Flow that will let power users sideload APKs from unverified developers with extra security checks. The company says the feature will roll out in August 2026, ahead of a broader developer verification system that will start in select countries in September.

The goal is to keep sideloading available without making it too easy for scammers to pressure people into installing malicious apps. Google says Advanced Flow adds a one-time delay and several confirmation steps that are meant to break the urgency scammers rely on during phone and social engineering attacks.

This is an important shift for Android users because Google is not removing sideloading. Instead, it is adding more friction around apps from unverified developers while still leaving a path open for experienced users who understand the risks. Google also says ADB sideloading will remain available for development and testing.

What Advanced Flow does

Advanced Flow is a one-time setup for users who want to install apps from developers Google has not verified. After completing it, users can install apps from unverified developers for seven days or indefinitely, but Android will still show a warning that the app comes from an unverified source.

Google says the feature is designed for power users, not for ordinary app installs. The company frames it as a compromise between Android’s openness and stronger protections against scam-driven malware.

How the new sideloading flow works

Google says users will need to complete these steps one time before they can install APKs from unverified developers:

• Turn on Developer Mode in system settings
• Confirm that no one is coaching them through the process
• Restart the phone and reauthenticate
• Wait one day
• Return and verify the change with biometrics or device PIN
• Choose whether to allow installs for seven days or indefinitely

Google says this structure targets a common scam pattern. Attackers often stay on the phone with victims, create panic, and walk them through disabling protections before the victim has time to stop and think. The company says the restart, reauthentication, and waiting period are meant to break that cycle.

Feature	What Google says it does
Developer Mode requirement	Prevents quick one-tap bypasses
Coaching check	Helps stop scammer-guided installs
Restart and reauthentication	Interrupts remote access or live scam coaching
One-day waiting period	Reduces urgency and gives users time to reconsider
Warning label on install	Reminds users the app is from an unverified developer

Source: Google’s Android Developers Blog and Android Developer Console Help.

Why Google is making this change

Google says Advanced Flow is part of a bigger push called Android developer verification. Under that system, apps installed on certified Android devices will need to come from verified developers, starting in a few countries first. Google’s help page says the first rollout begins in September 2026 in Brazil, Indonesia, Singapore, and Thailand, with wider expansion planned for 2027 and later.

The company says the change is aimed at repeat offenders who distribute scam or malware-laced apps outside normal app store channels. Google argues that verifying developer identity adds accountability without ending sideloading entirely.

Google also ties the change to scam losses. In its announcement, the company cites a 2025 Global Anti-Scam Alliance report that found 57% of surveyed adults experienced a scam in the previous year, with global consumer losses reaching $442 billion.

What this means for users and developers

For ordinary users, not much changes unless they try to install an app from an unverified developer. Verified developers will still be able to distribute apps directly or through third-party app stores, according to Google.

For hobbyists and students, Google says it is also introducing free limited distribution accounts that let them share apps to up to 20 devices without a government ID or registration fee. Google says early preview access for that system is expected to begin in June 2026.

For developers who build and test their own apps, Google says Android Debug Bridge will remain the standard way to install modified or unverified apps on personal devices. That means Advanced Flow is not replacing ADB for development work.

Key takeaways

• Google will launch Advanced Flow in August 2026.
• The feature adds extra steps before users can sideload apps from unverified developers.
• Android developer verification starts in September 2026 in Brazil, Indonesia, Singapore, and Thailand.
• Sideloading is not going away, and ADB installs will still work.
• Google says the new flow is meant to disrupt scam tactics built around urgency and live coaching.

FAQ