Google announced on Monday that it is ramping up security measures for Android app distribution. Starting next year, developers distributing their apps on Android devices will need to verify their identities, not just those who distribute through the Play Store. This change will impact all certified Android devices, with a gradual global rollout.
While developers will still be able to distribute outside of the Play Store through other app stores or via sideloading, they will no longer have the option of anonymity. This move is aimed at reducing the presence of bad actors who distribute malware, commit financial fraud, or steal personal data by hiding their identities. Google’s own survey revealed that internet-sideloaded sources have had over 50 times more malware compared to Google Play, where developer verification has been required since 2023.
Interested developers can sign up for early access in October 2025 to test and provide feedback on the new verification system. By March 2026, all developers will need to comply with the new requirements. By September 2026, apps installed on Android devices in specific countries will need to meet the new standards, with a global rollout scheduled for 2027.
Developers will be required to provide their legal name, address, email, and phone number, potentially prompting independent developers to register as a business for privacy reasons. This change mirrors Apple’s recent implementation for the EU App Store to comply with the Digital Services Act.
Google ensures that student and hobbyist developers will have a separate type of account in the Android Developer Console to cater to their specific needs. These changes are expected to have a significant impact on the Android app ecosystem as Google aims to enhance security, reduce malware, and improve overall platform integrity.
