low
Google opens Registered App Stores program for one-tap Android installs from vetted third-party stores outside the US
1 fonte(s)
·
1 atualização(ões)
·
publicado 28/10/2026 14:08
·
coletado há 4 dias
Google will let third-party Android app stores apply to its Registered App Stores program from December 1. Approved stores get one-tap installs without the usual confirmation screens, plus background updates. The features require devices on Android 17 QPR2 or later in supported countries, which exclude the US. To qualify, a store must pass identity checks and submit its full catalog, every new app and every update to Google for ongoing malware scanning. Joining is optional, and stores that stay out keep operating as they do today.
Detalhes técnicos
- Stores must be registered as an organization and keep their developer identity verified under Android developer verification.
- Stores must send every version of their own app to Google for malware screening, matching the version published elsewhere. They must also keep malware and potentially harmful apps out of the catalog, fix major security flaws, and not block or interfere with other app stores or hide or alter Android security notifications.
- Stores must still obtain explicit user consent for each install and "must not install apps silently without user consent." Large downloads and background installs must show a visible notification, and installs started on another device require a persistent notification.
- Registered stores get the Android Developer ID API to check whether each catalog app comes from a verified developer. Google recommends blocking installs of apps that fail the check.
- The fee is $10,000 per year, due before review. If more than 1% of install attempts or more than 2% of a store's apps are found potentially harmful over 30 days, Google charges additional screening and cleanup fees. Non-compliant stores can be removed after notice and a chance to fix the issue. Each store remains liable for its catalog, and Google does not moderate content.
- Google's program pages do not describe how submitted apps are scanned, how fast uploads are checked, or what the checks produce.
- Separately, Android developer verification is in its first phase with seven app stores. Since September 30, certified devices in Brazil, Indonesia, Singapore and Thailand check that apps from those stores come from verified developers, and Google plans worldwide checks in 2027.
- Availability follows the user's home country, and short trips do not disable the features. Android 17 QPR2's latest build (October 16) is still a beta with no final release date. In the US, a separate program for distributing third-party stores through Google Play has been in effect since July 22.
Remediação
- IT administrators can block registered stores from being installed on managed devices. Google's pages do not say whether the block also applies to a store that is already installed.
- Stores should use the Android Developer ID API and block installs of apps that fail the verified-developer check.
Linha do tempo
-
Google opens Registered App Stores program for one-tap Android installs from vetted third-party stores outside the US
ler a análise desta fonte ocultar
Google will let third-party Android app stores apply to its Registered App Stores program from December 1. Approved stores get one-tap installs without the usual confirmation screens, plus background updates. The features require devices on Android 17 QPR2 or later in supported countries, which exclude the US. To qualify, a store must pass identity checks and submit its full catalog, every new app and every update to Google for ongoing malware scanning. Joining is optional, and stores that stay out keep operating as they do today.
Technical Details
- Stores must be registered as an organization and keep their developer identity verified under Android developer verification.
- Stores must send every version of their own app to Google for malware screening, matching the version published elsewhere. They must also keep malware and potentially harmful apps out of the catalog, fix major security flaws, and not block or interfere with other app stores or hide or alter Android security notifications.
- Stores must still obtain explicit user consent for each install and "must not install apps silently without user consent." Large downloads and background installs must show a visible notification, and installs started on another device require a persistent notification.
- Registered stores get the Android Developer ID API to check whether each catalog app comes from a verified developer. Google recommends blocking installs of apps that fail the check.
- The fee is $10,000 per year, due before review. If more than 1% of install attempts or more than 2% of a store's apps are found potentially harmful over 30 days, Google charges additional screening and cleanup fees. Non-compliant stores can be removed after notice and a chance to fix the issue. Each store remains liable for its catalog, and Google does not moderate content.
- Google's program pages do not describe how submitted apps are scanned, how fast uploads are checked, or what the checks produce.
- Separately, Android developer verification is in its first phase with seven app stores. Since September 30, certified devices in Brazil, Indonesia, Singapore and Thailand check that apps from those stores come from verified developers, and Google plans worldwide checks in 2027.
- Availability follows the user's home country, and short trips do not disable the features. Android 17 QPR2's latest build (October 16) is still a beta with no final release date. In the US, a separate program for distributing third-party stores through Google Play has been in effect since July 22.
Remediation
- IT administrators can block registered stores from being installed on managed devices. Google's pages do not say whether the block also applies to a store that is already installed.
- Stores should use the Android Developer ID API and block installs of apps that fail the verified-developer check.