Google Mandates Android Developer Verification to Combat Malicious Apps
**Google** is rolling out mandatory Android developer verification to combat malicious apps distributed outside the **Google Play Store**. This initiative aims to reduce the anonymity of bad actors and enhance user safety, particularly in regions like Brazil, Indonesia, Singapore, and Thailand.

**Google** has announced the official rollout of Android developer verification for all developers. This move is designed to tackle the issue of malicious actors distributing harmful applications while concealing their identities.
This development precedes a planned verification mandate set to take effect in Brazil, Indonesia, Singapore, and Thailand this September, with a global expansion slated for next year.
### Android Developer Console Requirement
As part of this initiative, **Google** requires app developers distributing apps outside of the **Google Play** ecosystem to create an account in the Android Developer Console to verify their identity. Developers already verified through the **Google Play Store** may already meet the requirements.
According to Matthew Forsythe, director of product management for Android App Safety, the user experience for installing apps will remain largely unchanged. However, users attempting to install unregistered apps will require **ADB** or an advanced flow, enhancing community safety while preserving flexibility for advanced users.
Android Studio developers can monitor their app's registration status directly within the integrated development environment (IDE) when generating a signed App Bundle or **APK**.

Developers who have met **Play Console's** developer verification requirements will have their eligible **Play** apps automatically registered. For apps that cannot be registered automatically, a manual app claim process is available.
### Sideloading and Advanced Flows
As previously announced, users retain the option to sideload unregistered **APK** files through an advanced flow. This process includes an authentication step to confirm user intent and a 24-hour waiting period to deter scams.
Forsythe emphasized that this one-time process for advanced users is designed to prevent coercion by scammers attempting to install malicious software.
### Apple's Privacy Enforcement
In related news, **Apple** has revised its Developer Program License Agreement to reinforce privacy rules concerning third-party wearables' access to live activities and notifications.
**Apple** explicitly prohibits the use of Forwarding Information for advertising, profiling, training models, or monitoring location. Furthermore, developers are barred from disseminating Forwarding Information to other applications or devices beyond authorized accessories.
The updated agreement also forbids remote storage of forwarding information on cloud services, modifications that materially alter content meaning, and decryption of data outside the accessory itself.