Google is introducing developer identity verification for any Android app that installs on certified devices, whether it comes from the Play Store, a third-party store or a direct APK download. Google describes this as an ID check for the person or organization behind an app, not a review of the app itself. Sideloading remains, but the developer must be verified first.
Who is affected
The policy applies to certified Android devices that ship with Google Mobile Services. Uncertified builds and de-Googled ROMs are out of scope. That means devices running alternative ROMs like LineageOS or vendors that ship without Google services are unaffected by the requirement.
Timeline and rollout
Google’s timeline is clear. Early access invites start in October 2025. Verification opens to all developers in March 2026. Enforcement begins in September 2026 in Brazil, Indonesia, Singapore and Thailand, with a global rollout planned in 2027 and beyond.
What developers must provide
Developers distributing outside Play will use a new Android Developer Console. Individuals will submit personal details like legal name, address, email and phone number, with government ID possibly required. Organizations will verify their business identity and website. Student or hobbyist accounts are planned with lighter limits so experimentation is still possible. Existing Play Console-verified developers do not need a second account.
Why now
Google says malware from internet-sideloaded sources appears over 50 times more often than malware on apps available through Google Play, and identity checks raise accountability for repeat offenders.
In parallel, Kaspersky reports Android malware samples reached about 180,000 in Q1 2025, up roughly 27 percent from Q4 2024, with threats blocked on over 12 million devices, and notes many campaigns disguise as legitimate apps.
Why it matters for users
For most people who only install from Play, daily behavior changes little. For power users who sideload, installs will continue to work once the developer is verified. This aims to reduce impersonation and the whack-a-mole of banned developers reappearing under new names while keeping Android’s distribution openness.
Discover more from Techish Kenya
Subscribe to get the latest posts sent to your email.
