Google is tightening Android security once again, and this time it directly affects how users sideload apps—especially on OPPO and Vivo devices. A new policy, expected to roll out in August, could introduce a mandatory 24-hour waiting period before installing apps from unverified developers.
The move is part of Google’s broader effort to combat scams and malicious apps, which often rely on urgency and manipulation to trick users into installing harmful software.
Google’s New “Advanced Flow” for Sideloading apps
Under the upcoming system, which Google refers to as “advanced flow,” users attempting to install apps from outside official app stores will go through a stricter verification process. Unlike the current one-time toggle for “install unknown apps,” this new method adds multiple layers of friction designed to ensure users are making informed decisions.
The process begins with enabling developer mode, followed by a confirmation step where users must acknowledge they are not being coerced into disabling Android’s built-in protections. Once completed, a 24-hour waiting period is triggered before installation can proceed. After the waiting period, users must authenticate using biometrics or a device PIN.
Importantly, this is a one-time process. Once users complete the full verification flow, they can continue sideloading apps without repeating the steps. Alternatively, Android will also allow temporary sideloading access for a 7-day window, giving users some flexibility.
Google says the goal is to disrupt common scam tactics. Many malicious actors rely on pressuring victims into quickly installing apps, often posing as urgent updates or security fixes. By introducing a delay, Google aims to give users time to reconsider and avoid falling victim to these attacks.
In parallel, Google is strengthening its developer verification requirements. Starting in September, developers distributing apps outside official channels will need to verify their identity by submitting personal information, including a valid ID, address, email, and phone number. A one-time $25 registration fee will also apply.
One notable exception to the new rules is sideloading via Android Debug Bridge (ADB). According to reports, this method will bypass both the advanced flow and the 24-hour waiting period, making it an alternative for more advanced users.
Overall, the changes signal Google’s continued push to make Android safer, even if it means adding a bit more friction for users who prefer installing apps outside traditional app stores.
