Google is set to enhance security protocols related to sideloading apps by mandating identity verification for Android developers who distribute applications outside of the Play Store. This requirement will begin in September 2024 for developers in Brazil, Indonesia, Singapore, and Thailand, with plans for a global rollout starting in 2027. Developers will need to provide personal information such as their legal name, address, email, phone number, and potentially upload an official government ID. While identity verification is already in place for the Google Play Store, this new measure primarily impacts those who exclusively distribute apps through alternative means.
The intention behind these updated requirements is to enhance user safety and limit exposure to malware and scams while sideloading. By requiring developers to verify their identities, it becomes more challenging for those who have previously distributed harmful apps to re-emerge using a different name after facing removal. This follows similar initiatives by Apple, which also introduced verification requirements for the EU App Store to comply with the Digital Services Act, mandating that online platforms confirm the identities of “traders” distributing goods and services in the EU.
Google emphasizes that while the verification process primarily targets commercial developers, it remains committed to keeping Android accessible for student and hobbyist developers. To support this community, Google plans to establish a separate developer console that will impose limits on the number of apps and installations available.
Developers are being encouraged to sign up for early access to the new verification rules, with an invitation to provide feedback and suggestions regarding their implementation. This feedback loop may result in adjustments to the guidelines before they are officially enacted.
Source: https://www.theverge.com/news/765881/google-android-apps-side-loading-developer-verification