Google is backpedaling on its decision to introduce new identity verification rules for all developers, stating that it will also introduce accounts for limited app distribution and will allow users to install apps from unverified devs.
As announced in August, Google was planning to introduce what it called “Developer Verification” starting in 2026 to block malware spreading via sideloaded apps sourced from outside the official Google Play app store.
The new rules require that all apps must originate from developers with verified identities to be installed on certified Android devices; otherwise, their installation will be blocked.
However, the announcement was met with widespread backlash from Android users and developers (outraged by the registration process, which required them to pay a fee and provide government identification), who organized to report Google to their national regulators and discourage others from signing up for Google’s developer registration early access program.
F-Droid, the most popular third-party Android app store, also warned last month that Google’s new registration could mean the end of the project.
“We do not believe that developer registration is motivated by security. We believe it is about consolidating power and tightening control over a formerly open ecosystem,” F-Droid said.
In response to the negative feedback, Google stated that it will “shape a dedicated account type” for developers who wish to distribute apps to limited audiences, such as family or friends, “without going through the full verification requirements.”
The company also announced that it is developing a “new advanced flow” for experienced users with a higher risk tolerance who wish to sideload unverified apps. This new system will provide warnings about the associated risks but will ultimately allow users to make their own choices.
“We appreciate the community’s engagement and have heard the early feedback – specifically from students and hobbyists who need an accessible path to learn, and from power users who are more comfortable with security risks. We are making changes to address the needs of both groups,” said Matthew Forsythe, Director of Product Management for Android App Safety.
With these concessions in place, Google has started inviting developers distributing outside of the Play Store to early access for developer verification in the Android Developer Console, and also plans to invite Play developers to the program starting November 25.
Android developer verification will be open to all developers in March 2026. Beginning in September 2026, apps must be registered by verified developers to be installed on Android devices in Brazil, Indonesia, Singapore, and Thailand, with a global rollout planned for 2027.
7 Security Best Practices for MCP
As MCP (Model Context Protocol) becomes the standard for connecting LLMs to tools and data, security teams are moving fast to keep these new services safe.
This free cheat sheet outlines 7 best practices you can start using today.