Android’s New Advanced Flow Makes Sideloading Harder

Google is continuing to tighten Android security while still trying to preserve its open nature. After announcing stricter developer verification requirements, the company has now revealed more details about a new “Advanced Flow.” This flow allows users to sideload apps from unverified developers, but with significantly more steps involved.

A “High-Friction” process designed for power users

This new process, highlighted by AssembleDebug on X, gives us an early look at how Google plans to handle sideloading going forward. Unlike the current, relatively simple sideloading method, this new advanced flow introduces a multi-step process. It includes built-in delays and confirmations.

According to Google, the goal is to make sideloading more “high friction.” This ensures users fully understand the risks before installing apps from unknown sources. At the same time, the company still wants to give experienced users the freedom to install from unknown sources via APK files.

Based on the details shared, the process includes several steps:

1. Confirm you’re not being coerced: Users must explicitly confirm that no one is pressuring them into installing the app. This directly targets scams where attackers guide victims step-by-step.
2. Restart the device and reauthenticate: The system forces a reboot and requires authentication, adding another layer of friction.
3. Wait 24 hours before proceeding: A mandatory delay gives users time to reconsider. This step specifically aims to break urgency-based scams.
4. Enable installation manually: After completing all steps, users can finally allow sideloading, either temporarily or permanently.

This process is designed to slow users down and prevent impulsive decisions, especially in situations involving social engineering attacks.

Why is Google making this change?

Google says sideloading remains an important part of Android, but it also comes with serious risks. For example, apps installed from outside official sources are significantly more likely to contain malware, which is why the company is introducing developer verification and stricter safeguards.

At the same time, scammers often exploit sideloading by tricking users into installing malicious apps. The new flow directly addresses this by making it harder to bypass warnings under pressure.

Google makes it clear that sideloading isn’t being removed, even with the added friction. Instead, the company is trying to strike a balance between keeping Android open for enthusiasts and developers and protecting less experienced users from scams and malware. Advanced flow reflects the compromise, giving users the option to proceed. Only after going through multiple safety checks.