Following pushback from independent app stores such as F-Droid, Google has published a blog post titled “Let’s talk security: Answering your top questions about Android developer verification.” In the post, Google stated that “sideloading is fundamental to Android, and it is not going away,” clarifying its position on its upcoming developer verification requirements.
Google explained the new rules are intended to enhance safety by tying every Android app to a verified developer identity. The company said this measure will make it more difficult for malicious actors to impersonate developers or distribute malware through applications. According to the post, “Our new developer identity requirements are designed to protect users and developers from bad actors, not to limit choice.” Google also confirmed that verified developers will remain free to distribute their apps through any method, including direct downloads and third-party app stores.
For hobbyists and small-scale creators, Google is introducing a free developer account option. This will permit them to distribute apps to a limited number of devices without undergoing the full verification process that requires submitting a government ID. To use this option, an end-user must share a device identifier with the application developer. The developer then enters that identifier into Google’s console and provides the user with instructions for downloading the app. This system enables Google to limit how many devices can install applications from an unverified developer. Any developer who wants to distribute their app to a broader audience must still complete the full identity verification process.
However, the announcement did not address the primary concern raised by F-Droid regarding the control of developer identities and signing keys. F-Droid noted that under the new rules, all Android apps—even those distributed outside the Play Store—will need to be associated with a Google-verified developer account. The organization argues this effectively makes Google the central authority for all Android app distribution, threatening the viability of alternative app stores. F-Droid also stated that it cannot take over app identities for its open-source contributors. As a result, many community-built apps could be removed if their developers cannot or will not register with Google. While the technical function of sideloading will continue to exist, the ecosystem of independent app stores that depends on it could be impeded.
