Mar 23, 2026 10:55:00

Google has announced details of 'Advanced Flow,' which enables secure APK sideloading on Android.

Google has announced details of ' Advanced Flow ,' a new feature designed to more securely allow uncertified developers to sideload apps, as part of its efforts to balance openness and security within the Android ecosystem. The feature is scheduled to be rolled out in August 2026. Advanced Flow was

announced in November 2025 and is positioned as a secure compromise to facilitate the implementation of the developer certification requirements announced in August 2025.

Android Developers Blog: Android developer verification: Balancing openness and choice with safety
https://android-developers.googleblog.com/2026/03/android-developer-verification.html

Google adds 'Advanced Flow' for safe APK sideloading on Android
https://www.bleepingcomputer.com/news/security/google-adds-advanced-flow-for-safe-apk-sideloading-on-android/

According to Matthew Forsyth, Android's Director of Product Management, Advanced Flow was developed in response to the serious problem of fraud. The Global Anti-Scam Alliance (GASA) 2025 report found that 57% of adults surveyed had experienced fraud in the past year, resulting in a global consumer loss of $442 billion (approximately 70.5 trillion yen).

Scammers use threats of legal trouble or harm to family members to instill fear in victims, and then instruct them over the phone to disable security settings. Forsyth says that Advanced Flow is carefully designed to break this cycle of coercion and give users time and leeway to make a calm decision.

Advanced Flow consists of four steps. First, enable developer mode in the system settings and perform a check to ensure you are not receiving instructions from a third party.

Next, restart your device and re-authenticate it. This will disconnect any remote access or active calls that the scammer may be using.

After a 24-hour protection waiting period, identity verification will be performed again using fingerprint, facial recognition, or a device PIN. This one-day waiting period is intended to neutralize the time pressure on fraudsters and give users time to think.

Finally, once you've confirmed you understand the risks, you'll be able to install apps from unverified developers for 7 days or indefinitely. You'll still see warnings during installation, but you can still select 'Install.'

Google states, 'This procedure is a one-time process for power users. It has been carefully designed to prevent users who have been scammed from being coerced into installing malicious software.'

However, sideloads from verified developers with confirmed identities will still be able to be installed quickly, as before. In addition, free, limited distribution accounts will be available for students and hobby users, which do not require government-issued identification or registration fees. This will allow apps to be shared among small groups of up to 20 devices.

Although the initial plan was revised due to community opposition , the developer certification requirement is still scheduled to be implemented in August 2026. Software from uncertified publishers will be blocked from installation on certified devices, so developers are encouraged to check the dedicated page for details.