When Android’s new sideloading rules come into force, installing apps from developers without Google verification (more on that later) will become extremely tedious by design and require a 24-hour lock before users can install them. Here’s what the new flow will look like:
- Step 1: Enable Developer Mode
No more quick toggles. You’ll need to manually enable developer options first, adding an intentional layer of friction. - Step 2: Confirm you’re not being coerced
Android will explicitly ask if someone is guiding you through disabling protections on your device as a direct response to scam tactics. - Step 3: Restart your phone
This cuts off active calls, remote access, or screen-sharing sessions, which scammers often rely on. - Step 4: Wait 24 hours
Yes, really. There’s a mandatory one-time, one-day waiting period before you can proceed and sideload an app from an unverified developer. Google calls it a “protective waiting period.” - Step 5: Re-authenticate
After the one-day wait, you’ll need biometric authentication or your PIN to confirm it’s really you. “Scammers rely on manufactured urgency, so this breaks their spell and gives you time to think,” Google notes in its blog. - Step 6: Finally, install the app
Only then can you sideload, with the option to allow installs for seven days or indefinitely. Even within that seven-day time frame, once sideloading is enabled you can install as many different APKs from as many different unverified developers as you like.
Even after all this, Android will still show a warning that the app is from an unverified developer, but at that point, you can tap “Install anyway.”
