You may have seen headlines saying Google is “locking down Android”. That's a bit strong, but something real is changing. Google is bringing in a rule that apps must come from a developer who has registered with Google and proved who they are — or most Android phones won't install them. Here's what it is, why Google says it's doing it, when it reaches the UK, and whether you need to do anything. (Short answer on that last one: probably not yet.)
What's actually changing
Until now, anyone could write an Android app and hand it to you as a file to install, with no need to go through the Google Play Store. Most people never do this, but plenty of useful apps — including many free, open-source ones — are shared exactly that way.
Under Google's developer verification scheme, announced in August 2025, that changes. On Google-certified Android phones, an app will only install normally if its developer has registered with Google and verified their identity. That includes apps from outside the Play Store. Google says almost every app already on the Play Store gets registered automatically, so the change mainly hits apps that come from elsewhere.
When it happens
- August 2026: the tools went live. That includes a new “advanced” route for experienced users (more on that below) and free accounts for hobbyists.
- 30 September 2026: the rule starts being enforced in four countries: Brazil, Indonesia, Singapore and Thailand.
- 2027 and beyond: Google says it will roll it out to every certified Android device worldwide.
So, for the UK: nothing changes on 30 September. Google hasn't announced a UK date. It falls under that “2027 and beyond” global rollout.
Why Google says it's doing it
Scams. Google points to research finding that 57% of surveyed adults had experienced a scam in the past year, with global losses put at $442 billion. A common trick is to ring someone, pile on the pressure (“your bank account is under attack, install this app now”), and talk them into installing something malicious from outside the Play Store. If every app has a real, identified person behind it, it's harder for scammers to keep doing that under new names.
That's a fair point, and we're not going to pretend otherwise. Phone scams are real, they target exactly the people who read this site, and anything that makes them harder has some value.
The trade-off
The cost is openness. Registering means handing Google your identity and accepting its terms. Many small and volunteer developers won't want to do that, and some have said they won't. F-Droid, the long-running store for free, open-source Android apps, has called the plan a threat to its whole model. F-Droid can't register other people's apps on their behalf. It has advised developers not to sign up, and it joined an open letter in February 2026 asking Google to change course.
Google did soften the plan after the pushback:
- Hobbyist accounts: students, teachers and hobbyists can share an app with up to 20 devices without ID or a fee.
- The “advanced flow”: experienced users can still switch on installing apps from unregistered developers. You turn on developer options, confirm nobody is pressuring you, restart the phone, wait a day, then confirm with your fingerprint or PIN. After that, those installs come with warnings. The waiting day is deliberate: a scammer on the phone can't make you do it on the spot.
- The developer tool (ADB): the technical route of installing an app from a computer still works, though it's not something most people will ever use.
So installing independent apps doesn't become impossible. It becomes more of a hurdle, and some developers may simply give up on ordinary Android phones.
Why GrapheneOS isn't affected
The rule applies to Google-certified Android devices: phones whose makers license Google's own apps and services and pass Google's certification. That's what enforces the check. GrapheneOS doesn't license Google's services (its own documentation says so), so a Pixel running GrapheneOS isn't a certified device, and Google's check isn't part of it.
In practice, on a de-Googled Pixel you install apps from wherever you choose, as before. That includes the Play Store if you want it (through GrapheneOS's optional, sandboxed version), F-Droid-style stores, or straight from a developer's own site. You decide what goes on the phone, and you carry the responsibility for it too.
Nothing is guaranteed forever. Google could change its rules again, and we'll update this page if it does. But as things stand, this is one change that passes GrapheneOS by.
So what should you do?
- If you only use the Play Store: nothing. You probably won't notice any difference.
- If you rely on apps from outside the Play Store: nothing yet in the UK. It's worth checking whether those developers plan to register, and keeping an eye on the 2027 rollout.
- If this is the push you needed: a de-Googled Pixel keeps things the way they were. Our guide to choosing a Pixel covers which models to buy, and the free guide walks you through doing it yourself.
And whatever phone you use, the anti-scam advice holds. If someone calls and tells you to install an app, hang up. Your bank will never ask you to.