Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams

Google announced an advanced sideloading flow that enforces a mandatory 24-hour wait and a one-time confirmation process before installing apps from unverified developers to reduce scams and malware while preserving user choice. The policy update accompanies a developer verification mandate and free limited distribution accounts for hobbyists, and arrives amid the emergence of new Android threats such as Perseus targeting users in Turkey and Italy. #Perseus #Google

Keypoints

Google’s advanced flow requires a 24-hour wait and biometric or PIN confirmation before sideloading apps from unverified developers.
A developer verification mandate will require apps to be registered by verified developers on certified Android devices to help flag bad actors faster.
Over 50 developers and marketplaces, including F-Droid, Brave, the EFF, Proton, and The Tor Project, warn the rules could create privacy, surveillance, and access barriers.
Google will offer free limited distribution accounts allowing hobbyists and students to share apps with up to 20 devices without providing government ID or paying a fee.
The rollout coincides with active Android threats like Perseus and at least 16 other malware families targeting users in regions such as Turkey and Italy.