Google announced last week that Android will gain a new way for users to install apps from unverified developers — but the path to that freedom is deliberately slow. The system, branded Advanced Flow, is scheduled to roll out in August 2026 for all Android versions via Google Play Services, arriving just before new mandatory developer verification requirements take effect.

The announcement comes against a backdrop of fierce criticism from the Android developer community, particularly after Google initially revealed plans to restrict sideloading without clearly outlining an alternative path. The company now says it has “taken user and community feedback to heart,” with Matthew Forsythe, Director of Product Management and Android App Safety, promising that users won’t have to choose between an open ecosystem and a secure one.

What Advanced Flow Actually Does

Advanced Flow is designed for what Google calls “power users” — developers, tech enthusiasts, and anyone who regularly installs APKs outside the Play Store. The process is one-time only, but it is deliberately engineered to be impossible to rush.

The Four-Step Advanced Flow Process
1
Enable Developer Mode

Navigate to “About phone” and tap Build Number seven times. This prevents accidental one-tap bypasses often exploited in high-pressure scam scenarios.

2
Confirm You Are Not Being Coached

A safety check prompts users to confirm no one is talking them into disabling security protections — targeting the moment scammers are most likely to intervene.

3
Restart Your Device and Re-authenticate

A mandatory reboot cuts off any active phone calls or remote-access sessions a scammer might be using to monitor the user’s screen in real time.

4
Return After 24 Hours and Verify with Biometrics or PIN

A one-day mandatory waiting period is followed by a final confirmation using fingerprint, face unlock, or PIN — ensuring the device owner, not a coercer, is making the decision.

Once users complete all four steps, they can install apps from unverified developers and choose to allow this for either seven days or indefinitely. In both cases, a warning banner will appear each time an app from an unverified developer is installed — a permanent nudge that Google says reflects the principle of informed consent.

“In that 24-hour period, we think it becomes much harder for attackers to persist their attack.”

— Sameer Samat, President of Android Ecosystem, Google

Why 24 Hours? The Fraud Psychology Behind the Wait

The cooling-off period is not an arbitrary inconvenience. It is the architectural centrepiece of Advanced Flow, and the data driving it is sobering.

57%
of adults globally experienced a scam in 2025 According to the Global Anti-Scam Alliance (GASA), consumer losses from scams reached an estimated $442 billion last year alone — making fraud one of the most prevalent financial threats worldwide.

The social engineering playbook behind the most damaging phone scams is well-documented: scammers impersonate banks, law enforcement, or family members, manufacturing a crisis that demands immediate action. They remain on the line throughout, coaching victims step-by-step through disabling security settings. Speed is their greatest weapon.

By forcing a device restart — severing any active call or screen-sharing session — and imposing a 24-hour pause, Advanced Flow directly dismantles that playbook. The reboot alone eliminates remote monitoring. The waiting period gives victims time to consult family, search the internet, or contact authorities. The biometric confirmation at the end of that period ensures that even if a PIN was compromised, physical presence is still required.

Hidden by Design

Perhaps as notable as what Advanced Flow does is where it lives. Google has deliberately buried the option deep within developer settings, meaning it will not surface proactively in any notification, onboarding screen, or suggestion. Only users who already know it exists will find it.

This is intentional. Android’s developer settings have long required a deliberate unlock sequence — tapping Build Number seven times — which itself acts as a friction layer that ordinary users are unlikely to encounter by accident. Advanced Flow builds on this existing culture of intentional access, ensuring that the audience who reaches it already has a baseline of technical intent.

ADB (Android Debug Bridge) installs remain entirely unaffected by the new verification requirements, preserving the established workflow for developers testing their own applications on connected devices.

A New On-Ramp for Students and Hobbyists

Alongside Advanced Flow, Google announced free limited distribution accounts — a parallel pathway aimed at students, independent developers, and hobbyists who want to share work-in-progress apps with a small audience without navigating the full Play Store registration process.

These accounts allow distribution to up to 20 devices, require neither a government-issued ID nor a registration fee, and will launch simultaneously with Advanced Flow in August. The cap on recipients means the accounts cannot be used for commercial distribution, but they are well suited for beta testing, collecting early feedback, and validating ideas before committing to full developer registration. Both features are expected to be fully operational before the new developer verification requirements take effect.

The Regulatory and Legal Context

Advanced Flow does not exist in a vacuum. Google’s willingness to create a more accessible sideloading path has been shaped by compounding external pressures — legal, regulatory, and competitive.

The company’s landmark settlement with Epic Games, which concluded earlier this year, required Google to open installation pathways more broadly and reduce Play Store commissions from 30% to 20% for most transactions. That settlement made a blanket sideloading lockdown untenable. Separately, the EU’s Digital Markets Act, antitrust investigations in the United States, and similar legislation in South Korea and Japan have all pushed tech platforms to reassess the viability of closed-garden distribution models.

Google also retracted an earlier, more restrictive timeline for developer verification after significant backlash from the open-source community — notably from the team behind F-Droid, a popular third-party app repository, who published a public letter criticising the original approach. Advanced Flow is, in part, Google’s answer to that criticism.

“If the platform doesn’t protect vulnerable users, it won’t be successful. And if it doesn’t honour openness, it also won’t be successful.”

— Sameer Samat, Android Ecosystem President

Rollout Timeline

October 2025

Early access for developers opened, allowing participation in discussions and system feedback before public rollout.

March 2026

Google publicly announces Advanced Flow and free limited distribution accounts, delivered via the Android Developers Blog.

August 2026

Advanced Flow and limited distribution accounts launch for all Android versions via Google Play Services, ahead of enforcement beginning.

September 2026

New developer verification requirements take effect, starting in Brazil, Indonesia, Singapore, and Thailand — markets with elevated rates of fraudulent app scams — before global expansion through 2027.

⚠ Accuracy Note

Some earlier coverage described Advanced Flow as a five-step process. Google’s official documentation confirms four steps: enabling developer mode, completing a safety check, restarting the device (with re-authentication), and returning after the 24-hour wait for biometric confirmation. The restart and re-authentication occur as a single combined step. Additionally, Advanced Flow has been announced but is not yet live — it launches in August 2026.

An Open Platform, With Caveats

Critics within the developer community remain sceptical. The advanced flow’s placement in developer settings means that for the vast majority of Android users, nothing about their experience will change — apps come from the Play Store, and that is that. For the minority who depend on alternative distribution, the new process adds meaningful friction even if it does not eliminate access entirely.

There are also open questions about effectiveness. Determined and technically sophisticated scam operations may eventually adapt to coach victims through a multi-step process across multiple days. And some argue that warning banners, no matter how well-designed, become invisible with repetition.

What is less contested is the direction of travel. Google is moving, however cautiously, toward a model in which the platform provides information and structured pauses rather than outright prohibition. Advanced Flow is the most concrete expression yet of what Android Chief Sameer Samat describes as the platform’s central challenge: preserving openness without abandoning the users who need protection the most.

✦ ✦ ✦

For everyday Android users, none of this will register. The Play Store remains the default, the path of least resistance, and the experience most people will ever encounter. But for the developers, tinkerers, and privacy-conscious users for whom Android’s openness has always been the point, August 2026 marks a significant — if deliberately complicated — expansion of their options.