Google slams the side-door: android will make unofficial apps wait 24 h

Google just turned sideloading into a bureaucratic obstacle course. Starting in September, every APK that hasn’t danced through the Play Store’s velvet rope will be escorted to a 24-hour holding cell while the company phones a friend to vouch for the developer’s identity. Mountain View calls it malware deterrence; everyone else calls it a chokehold on the open Android promise.

The new toll: 25 dollars and your cryptographic soul

Independent coders who once dropped a nightly build on GitHub must now upload their signing keys, pay a yearly 25 USD registration fee, and wait for Google’s automated bouncer to stamp their forehead. Miss one field in the form and the APK becomes radioactive: the system will refuse to install it unless the user first enables a buried toggle, taps seven times like an obsessive, waits a full day, then confirms—again—that they enjoy living dangerously.

Sameer Samat, VP of the Android ecosystem, swears the friction saves grandparents from fake bank apps. “Scammers can’t keep a victim hypnotized for 24 hours,” he told Ars Technica. The subtext: Google can. While regulators in Brussels mutter about Digital Markets Act breaches, the company is betting that a day of cooling-off beats another antitrust fine.

Power users get a scavenger hunt

The escape hatch exists, but it feels like a prank. You drill into Settings> About> Software version, hammer the build number until the phone begs for mercy, backtrack to Developer options, scroll to Allow unverified packages, enter your PIN, reboot, wait 24 hours, return to the same menu, choose between a seven-day fling or lifetime parole, tick the liability waiver, and finally—finally—install that open-source keyboard your cousin swears by.

Google knows 99 % of mortals will give up at step two. The remaining 1 %—the ROM flashers, the F-Droid loyalists—are collateral damage the company is willing to accept.

Europe fumed, google shrugged

Brussels warned explicit restrictions on third-party installs could breach DMA Article 6(4). Google’s response was to ship the policy anyway, front-loaded with security rhetoric. The Commission hasn’t opened a formal case yet, but insiders say the dossier is already labelled high priority. If history is a guide, the next act will be a multi-billion-euro fine and a sheepish Android 15 “update” that quietly dials back the waiting period.

Until then, the clock starts the moment you tap Install. Twenty-four hours to ponder whether that ad-free YouTube clone is worth the ritual humiliation. Google’s message is unmistakable: the wild west days of Android are over, and the sheriff wears a green robot badge.