Google is slightly relaxing its controversial new Android policy on sideloading, but the shift does little to change its overall direction.
The company confirmed that it will still move ahead with mandatory developer identity verification for nearly all apps while introducing a limited “advanced flow” that lets “experienced users” continue installing software from outside the Play Store.
According to Google, the new system will feature multiple security warnings meant to deter casual users from downloading unverified apps.
“It will include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands,” the company said.
The process is still being developed, with feedback now underway before finalization in the coming months.
The adjustment follows backlash from developers and Android fans who criticized Google’s original plan to block apps created by unverified developers starting next year.
The community argued that the move would effectively close off Android’s long-standing openness by removing the ability to install software freely.
Despite the new language, Google’s latest policy maintains the same structure.
Developer ID verification will still be required for nearly all app distribution.
Only students and hobbyists will be allowed to share apps with a limited number of devices without providing identification, and businesses deploying internal software will remain exempt.
For everyone else, verification and a $25 registration fee will be mandatory, including for apps distributed outside Google Play. Previously, there was no charge for independent distribution.
The rollout schedule remains the same. Developers who distribute apps outside the Play Store began receiving early-access invitations on November 3, while Play Store developers will get theirs starting November 25.
The early-access period runs through March 2026, after which the verification program will open to all developers. The rules take effect in Brazil, Indonesia, Singapore, and Thailand in September 2026, and globally in 2027.
Google maintains that the new requirements are about security, not control.