**Google** has officially rolled out its **Registered App Stores** program, a significant shift in how third-party app stores will operate on **Android** devices. This program, set to go live on December 1st, will allow qualifying app stores to offer a much smoother installation and update experience for users. ### Streamlined Installations with Conditions Under the new program, approved third-party app stores will gain the ability to install apps with a single tap, bypassing the traditional confirmation screens, and to update applications silently in the background. This feature will be available on devices running **Android 17 QPR2** or later, but initially only in specific supported countries, notably excluding the U.S. To qualify, app stores must undergo rigorous identity verification and submit their entire app catalog, along with all new apps and updates, for continuous malware scanning by **Google**. This represents a significant increase in oversight compared to the current sideloading process, where users must explicitly enable each third-party store to install apps and then confirm every individual installation and update. ### Program Origins and Requirements **Google** first announced this program in March, framing it as a resolution to ongoing disputes, including those with **Epic Games**. Participation remains optional; stores that opt out will continue to function under existing **Android** security protocols. Key requirements for stores wishing to join the **Registered App Stores** program include: * Registration as an organization and maintenance of a verified developer identity through **Google's** **Android developer verification** program. * Submission of all versions of the store's own app for malware screening, ensuring consistency across distribution channels. * Proactive efforts to prevent malware and potentially harmful applications from entering their catalog. * Prompt remediation of any major security vulnerabilities identified. * Non-interference with other app stores or **Android's** security notifications. * Payment of a $10,000 annual fee prior to **Google's** review. ### Accountability and Sanctions While **Google** will not moderate the content within registered stores, the stores themselves retain full responsibility and liability for their catalogs. Should a store exceed certain thresholds – specifically, if more than 1% of install attempts or 2% of its apps are flagged as potentially harmful over a 30-day period – **Google** will impose additional fees for screening and cleanup. Failure to meet any program requirement, including timely fee payments, can lead to temporary removal from the program, though **Google** has stated it will provide notice and an opportunity for remediation. ### Enhanced Developer Verification and Future Outlook Registered stores will also gain access to the **Android Developer ID API**, a tool designed to verify whether apps in their catalog originate from verified developers. **Google** recommends blocking installations of apps that fail this check. **Android developer verification** is a separate, ongoing **Google** initiative. Since September 30th, certified **Android** devices in Brazil, Indonesia, Singapore, and Thailand have been verifying apps from seven participating stores against verified developer credentials. **Google** plans to expand these checks globally by 2027. It's important to note that **Android 17 QPR2**, the platform version required for these new features, is currently in beta, with the final release date yet to be announced. Meanwhile, a distinct **Google** program for distributing third-party stores via **Google Play** has been active in the U.S. since July 22nd. This new framework presents a double-edged sword: greater convenience for users of third-party app stores, but also a tighter leash and higher bar for security and compliance for the stores themselves. For IT security professionals, this means a more controlled sideloading environment, potentially reducing some vectors for malicious app distribution, but still requiring vigilance regarding the trust placed in approved third-party stores.