Google’s Android sideloading 24-hour wait details?
Google adds a “cooling-off” period for sideloaded Android apps
Google is changing how Android users can install apps from outside the official Play Store by introducing what it calls an “advanced flow” for sideloading.
The key change is a mandatory waiting period: when a user tries to install an app from an unverified developer, the device will require a 24-hour cooling-off period before the installation can proceed. The policy is designed to slow down drive-by or rushed installs—an approach aimed at reducing the impact of malware and scam apps that take advantage of the sideloading path.
Google’s rollout is scheduled to begin as part of broader Android efforts in 2026. Starting in September, the company will begin restricting application installs under this flow, tied specifically to whether the developer is verified.
From a user and security standpoint, the waiting period changes the risk model for sideloading:
- It adds time for review before installation completes, reducing the odds a user immediately carries out a malicious prompt.
- It targets unverified developers, treating those apps as higher risk by default.
- It applies to installs outside Play, where users previously had fewer guardrails.
For developers and platforms that rely on sideloading—enterprise app distribution, region-specific ecosystems, and hobbyist tooling—the update matters because it adds friction. Enterprises distributing internal apps will likely need to understand how developer verification is handled for their distribution workflows.
Overall, the move is part of Google’s broader push to combat malware across the Android ecosystem by tightening the security gates around the app install process, not just the runtime behavior of apps after installation.