Overview
- Enforcement timeline: early access in October 2025, open to all developers in March 2026, required from September 2026 in Brazil, Indonesia, Singapore and Thailand, with global expansion from 2027.
- The rule covers every install method on certified devices, including third‑party app stores and direct APK sideloading, and Google says distribution choices remain permitted.
- Google cites internal analysis finding over 50 times more malware from internet‑sideloaded sources than from apps on Google Play as the primary rationale.
- A new Android Developer Console will support verification for non‑Play distribution, with a lighter path for students and hobbyists; developers provide identity details, and organizations may need credentials such as a D‑U‑N‑S number.
- Devices running non‑Google, non‑certified Android builds are out of scope, and initial reactions include support from authorities in Brazil, Indonesia and Thailand alongside concerns about reduced openness and added friction for hobbyists.