Google is rolling out a new policy requiring developer identity verification for all Android app installations on certified devices starting in 2026. This affects apps from the Play Store, third-party stores, and direct APK downloads, aiming to curb malware and increase accountability.

• Enforcement begins in September 2026 in Brazil, Indonesia, Singapore, and Thailand, with a global rollout in 2027.
• The policy applies to certified Android devices with Google Mobile Services, excluding uncertified builds and de-Googled ROMs.
• Google notes malware from internet-sideloaded sources appears over 50 times more often than from Google Play.
• Developers distributing outside Play will use a new Android Developer Console, submitting personal or business details.