Android apps installed outside Google Play
Google is starting to require every Android app to be registered by a verified developer. Once that reaches your phones, an unregistered app installed from a link, a file or a vendor's installer cannot be installed or updated on most Android phones without a deliberate workaround. Apps your IT team pushes to company-managed phones are exempt. If you are not sure who holds your app's signing key, start with an $8,000 audit: in 1 to 4 weeks you learn which of your apps are affected and what it takes to register them.
For businesses whose drivers, crews or customers depend on an Android app.Audits are $8,000, in 1 to 4 weeks.
Right now · Reviewed November 4, 2026
Each fact links to Google's own Android Developers pages. The dates are still moving, so this block is reviewed and expires on its own.
Since September 30, 2026, protections apply to installs from participating app stores in Brazil, Indonesia, Singapore and Thailand. Google says it will expand them "globally for all apps on certified Android devices in 2027."
Source: Android Developers (Creative Commons Attribution 2.5)
Google says that if users sideload your app directly, "these new verification requirements won't apply to your app yet", and recommends verifying before the global rollout.
Source: Android Developers (Creative Commons Attribution 2.5)
"Apps distributed through your organization store, on managed devices, won't need to complete the verification requirements." Google still recommends registering them, for installs from anywhere else.
Source: Android Developers (Creative Commons Attribution 2.5)
Once enforcement applies, an unregistered app can only be installed or updated after a one-time "advanced flow" on each phone, with a 24-hour wait, or by a developer with a cable (ADB). Otherwise "updates to unregistered apps will fail."
Source: Android Developers (Creative Commons Attribution 2.5)
Registering an app proves you own it with the key it was signed with. "If you lose your signing key you won't be able to register your packages."
Source: Android Developers (Creative Commons Attribution 2.5)
A D-U-N-S number (free, but it "can take up to 28 days"), a website verified in Google Search Console, official company documents, and a $25 fee in the Android Developer Console. It applies to certified phones and tablets on Android 7 and up.
Source: Android Developers (Creative Commons Attribution 2.5)
List every Android app your people use that does not come from Google Play.
Include vendor apps, scanner apps and anything installed from a link or a file.
For each one, write down how it reaches the phone.
Your managed store on company-managed phones is exempt. Links, files and personal phones are not.
Find out who holds each app's signing key and developer account.
If a former developer or vendor holds them, fix that first: see "Our developer is gone, and we don't control our code or App Store account."
Get a D-U-N-S number now if your company doesn't have one.
It is free but can take weeks, and verification cannot finish without it.
Verify your company and register each app.
In Play Console if you already publish there, otherwise in the Android Developer Console.
Test an install and an update on a phone that is not company-managed.
That is the case that breaks first.
Make registration part of every release.
New apps and new signing keys need registering too.
What it costs
For one app and one codebase, in 1 to 4 weeks. Larger apps are quoted higher. If the audit finds work to do, such as recovering the key, re-signing or moving to Google Play, that work is priced separately; keeping the app registered release after release can be part of maintenance, from $10,000 a month with a three-month minimum. Prices are for remote work. On-site work is quoted separately and priced higher.
How the audit worksEach Android app your people use, how it is installed, and whether verification applies to it.
Who holds each signing key and developer account, and whether your company can register the app.
The documents, accounts and order of steps, including what to do if a key is missing.
For any work that follows, if you decide to go ahead.
Google's requirement that every app installed on certified Android phones is registered by a developer whose identity Google has checked. Apps on Google Play are mostly registered automatically; apps installed any other way need registering by whoever holds the signing key.
Not if your IT team installs them from your organization's managed store. Google still recommends registering them, because the same app installed from a link or on a personal phone is treated differently.
Google has not given a date for the United States yet. The current dates are in the Right now block above, and we review them when Google changes them.
Ask for it, along with the developer account, before anything else. Google says a lost key means you cannot register the app; the fallback is a new version under a new name and key, which every phone must install again.
They can, phone by phone: it means turning on developer settings, waiting a day and confirming. For a fleet of drivers or a warehouse, that is a support job every time a phone is replaced.
A short note is enough. We reply with whether we can help and what the first step costs.