Google to require verified developers for all Android apps from 2026

Google Play Store

Google is tightening Android security with a sweeping new policy: starting in 2026, only apps from verified developers can be installed on certified Android devices. The move extends beyond the Play Store, covering sideloaded apps and third-party stores as Google tries to stem the tide of malware and financial scams.

The requirement builds on Play Store checks introduced in 2023 but now expands to all installation methods, including APKs downloaded outside Google’s ecosystem. Think of it, Google says, like an ID check at the airport — confirming who the developer is, not reviewing the contents of their app.

The company’s analysis shows malware from internet sideloading is over 50 times more common than from Google Play. By verifying developer identities, Google hopes to make it harder for fraudsters to quickly push new malicious apps after one is removed.

Developers distributing only outside Google Play will use a new Android Developer Console. Students and hobbyists will have a lighter process than commercial developers, while organisations will need to register with a D-U-N-S number. Google Play developers, meanwhile, already meet most of these requirements through existing checks.

The rollout begins with verification access for some developers this October, with general availability set for March 2026. Enforcement starts in September 2026 across Brazil, Indonesia, Singapore, and Thailand — markets hit hardest by scam apps. Global enforcement follows in 2027, when any app on a certified Android device will need a verified developer behind it.

Google insists developers still retain freedom of distribution, whether via sideloading or rival app stores. The difference is that, soon, every app on certified Android devices will have to come from a known, verified source.