Google announced on Monday that it will mandate identity verification for all Android app developers, extending requirements beyond the Play Store to cover apps installed via sideloading or third-party stores starting next year. This initiative aims to bolster security on certified Android devices by curbing the proliferation of malicious software.
Maintaining Openness While Enhancing Security
While Google is tightening its oversight, the company emphasizes that Android will remain an open ecosystem. Developers are still permitted to distribute software outside of the official Google Play Store. However, the era of anonymous distribution is coming to an end. Google asserts that this policy is a strategic move to eliminate bad actors who exploit developer anonymity to spread malware, facilitate financial fraud, and compromise user data.
Data-Driven Security Measures
The shift is backed by internal data indicating that sideloaded sources are significantly more dangerous than the official marketplace. Google reports that malware instances are over 50 times more frequent from internet-sideloaded sources compared to Google Play, where mandatory identity verification has been in effect since 2023.
Rollout Timeline and Regional Targets
Google has established a multi-phase implementation schedule to ensure a smooth transition:
- October 2025: Early access sign-ups begin, allowing developers to test the system and offer feedback.
- March 2026: Verification becomes mandatory for all developers.
- September 2026: Enforcement begins for apps installed in Brazil, Indonesia, Singapore, and Thailand.
- 2027: The verification requirements will expand to a full global rollout.
What Developers Need to Provide
To maintain distribution privileges, developers must submit their legal name, physical address, email address, and phone number. This requirement may prompt independent creators to register as formal business entities to safeguard their personal privacy. This move mirrors policies recently adopted by Apple in the EU, which now requires developers to declare their “trader status” under the Digital Services Act (DSA).
Special Provisions for Hobbyists
Recognizing the diverse nature of the developer community, Google confirmed that students and hobbyist developers will have access to a specialized Android Developer Console account. This tier acknowledges that the operational requirements for non-commercial developers differ significantly from those of enterprise organizations.
These upcoming changes represent a fundamental shift in the Android distribution landscape. By enforcing stricter identity standards, Google aims to mitigate the long-standing security risks that have historically impacted its platform.
