TL;DR
Google is launching a new app verification system on Android devices, beginning this month in select markets. The rollout will expand globally over the next two years, affecting app installation and developer processes.
Google has confirmed that it will begin deploying its new Android app verification system on certified devices starting this month, marking a significant shift in app security and developer registration processes. This change aims to enhance security by verifying apps before installation, impacting developers, device manufacturers, and users worldwide.
In a move to improve Android app security, Google will introduce a new verification system that will be active on most devices running Android 8 or higher. The package com.google.android.verifier will appear on devices, enabling Google to block the installation of unverified apps. The system will initially be dormant until regional activation.
In July, Google plans to release new APIs, including an Android Developer ID Status API to check if a package name is registered, and an Android Developer Console API to streamline app management for developers. These tools aim to reduce registration complexity and facilitate external developer participation.
Starting this month, Google will deploy the verification service on most certified devices, with plans to expand to markets like Brazil, Indonesia, Singapore, and Thailand by September. The verification process will be mandatory in these markets, with global expansion expected to follow, culminating in a comprehensive verification policy by 2027.
Google has also announced a ‘limited distribution’ program for hobbyist developers, allowing them to share apps with up to 20 devices without fees or ID verification. In August, an advanced verification bypass flow will become available globally, though it will require navigating complex menus and waiting periods.
Implications for Android Security and Developer Policies
This rollout signifies a major step toward stricter app security standards on Android, potentially reducing malicious apps and improving user trust. It also shifts the developer landscape, requiring registration and verification, which could impact small developers and hobbyists. The phased approach allows Google to monitor the system’s effectiveness and address issues before full global deployment.
As an affiliate, we earn on qualifying purchases.
Background on Android App Verification Efforts
Google has been gradually increasing security measures on Android, with previous efforts including Play Protect and app signing requirements. The new verification system builds on these initiatives, aiming for a more robust, centralized process. The phased plan was announced earlier this year, with initial testing in select markets and API releases to developers to prepare for the change.
“Google’s new verification system represents a significant enhancement in Android security, but its success will depend on widespread adoption and user compliance.”
— an anonymous researcher
As an affiliate, we earn on qualifying purchases.
Remaining Questions About Global Implementation and User Experience
It is not yet clear how quickly the verification system will be adopted in all markets, especially in regions with less device certification infrastructure. Details about how users will be informed or prompted during app installation and how developers will handle verification issues remain unclear. The long-term impact on small developers and app distribution channels is also uncertain.
Android developer registration software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Upcoming Phases and Developer Engagement Strategies
In the coming months, Google will expand the API suite and conduct testing with limited accounts, paving the way for broader rollout. Developers should prepare for increased registration requirements and familiarize themselves with the new APIs. The final goal is to establish a verified app ecosystem with reduced malicious activity and improved security for all Android users by 2027.
Android app signing certificates
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
When will the Android verification system become mandatory?
Verification will become mandatory in markets like Brazil, Indonesia, Singapore, and Thailand starting this September, with a global rollout expected to complete by 2027.
Will small developers be affected by the new verification process?
Yes, all developers will need to register and verify their apps, but Google is introducing a limited account option that allows sharing on up to 20 devices without fees or ID verification.
How will the verification process impact app installation on devices?
On certified devices, users will see a prompt or restriction if they attempt to install unverified apps, with the system gradually enforcing verification checks based on regional rollout plans.
What APIs are available to developers to manage verification?
Google plans to release the Android Developer ID Status API to check registration status and the Android Developer Console API for app management, easing registration and verification tasks.
Why is Google implementing app verification now?
The move aims to enhance Android security, reduce malicious apps, and build a more trustworthy app ecosystem as part of broader platform improvements.
Source: Ars Technica
