In this guide · 7 sections
Short answer
From 30 September 2026, certified Android devices in Singapore block installs of apps from unregistered developers through participating app stores, with global expansion in 2027. Register your developer identity and package names in Android Developer Console (US$25), or use managed devices for staff apps.
What changed on 30 September 2026
Google's Android developer verification page says protections began on 30 September 2026 for users who install apps from participating stores in Brazil, Indonesia, Singapore and Thailand, on certified Android devices running Android 7 or higher. Google compares it to an ID check at the airport: it confirms who the developer is, not what the app does.
According to Android Developer Console Help, the first phase verifies installs from seven app stores: Google Play, HONOR App Market, OPPO App Market, Samsung Galaxy Store, Palm Store (Transsion), vivo V-Appstore and Xiaomi GetApps. Google says it will work with more stores and expand verification to all apps on certified Android devices globally in 2027.
| Date | Milestone (per Google) |
|---|---|
| March 2026 | Verification opened to all developers in Android Developer Console and Play Console |
| August 2026 | Limited distribution accounts, developer APIs and the advanced flow for power users launched |
| 30 Sep 2026 | Protections begin in Brazil, Indonesia, Singapore and Thailand for installs from participating stores |
| 2027 | Verification expands globally for all apps on certified Android devices |
Which business apps are affected
Google's March 2026 update says most Play developers are already verified and over 99% of their apps were registered automatically. The risk sits with apps that never went through Play.
| Your situation | Affected now? | What to do |
|---|---|---|
| App on Google Play, Play App Signing used | Usually already registered | Check status on the Play Console home page |
| App on Samsung Galaxy Store or other listed stores only | Yes | Verify and register in Android Developer Console |
| APK sent to staff or customers by link or file | Not in phase one's store list; expected in 2027 | Register now so installs keep working when checks widen |
| Staff app pushed through your MDM's managed store | No, per Google's FAQ | Still worth registering in case it is installed elsewhere |
| Vendor-built app under the vendor's name | Depends on the vendor | Ask in writing whether they verified and registered it |
Google's FAQ says apps distributed through your organisation's store on managed devices do not need verification, because your IT admin has already vetted them. Our app developer cost guide explains who should own the developer account when an outside team builds your app.
What staff see if your app is not registered
Apps from developers who have not verified and registered cannot be newly installed from participating stores on certified devices in the affected countries. Google keeps two exits for power users, but neither is a good plan for a business rollout:
- Advanced flow: a one-time setup on each phone that includes a 24-hour waiting period and a fingerprint, face or PIN check, designed to resist scammers coaching victims on a call.
- Android Debug Bridge (ADB): installing from a computer over USB, which Google says is unchanged and has no waiting period.
- Updates: Google's FAQ says unregistered apps can only be installed or updated with the advanced flow enabled or by ADB, so turning the advanced flow off makes updates fail.
How to register your business and your app
Registration is done once per developer and then once per app (package name). If your app is on Google Play, start in Play Console; otherwise use Android Developer Console.
Decide who owns the account
Register as an organisation, in the company's name, using a company Google Account with 2-Step Verification on. Do not let a vendor or ex-staff member be the only owner.
Get a D-U-N-S number if you do not have one
Google requires one for organisation accounts. Dun & Bradstreet issues it free, but Google warns it can take up to 28 days, and to beware of third parties charging fees for it.
Create the full distribution account
Android Developer Console charges a US$25 fee for a full distribution account, similar to Play's registration fee. Complete the identity verification steps.
Register each package name with its signing key
You prove ownership with the app's signing key. Google warns that a lost signing key means you cannot register the package, so store keys in a proper key management system.
Test on a phone in Singapore
Install the app from the channel your staff use, on a certified device, and confirm it installs and updates without warnings.
For a tiny internal tool, Google's free limited distribution account lets you distribute to up to 20 authorised devices without a government ID. It is designed for students and hobbyists, needs each device to be authorised by code, and only accepts package names never seen on Android before.
Should you switch to a web app or managed devices?
If an app exists mainly so staff can fill forms, check stock or log jobs, a web app that runs in the browser avoids app-store rules altogether. If it needs the camera, offline use or device features, keep it native and register it, or push it through a managed store on company phones.
Keep a native Android app if
- It needs offline use, background location or hardware like scanners
- Staff use company phones you already manage
- Customers expect to find it in an app store
Move to a web app if
- It is mainly forms, lists and dashboards
- Staff use a mix of personal Android phones and iPhones
- You do not want to manage signing keys and store accounts
Our guide to custom web app development in Singapore covers costs and timelines for that route.
Do it yourself or get help?
If you built the app yourself and still hold the signing key, registering is a few hours of paperwork plus the D-U-N-S wait. Help is useful when a vendor built the app, the key is missing, or you want to replace the APK with something easier to maintain.
IT Sorted is a Singapore-based team of developers with over 10 years of experience. A Custom Business App (from S$4,900) runs in the browser on phones, tablets and desktops, so there is no APK to register, and a Custom Tool or Dashboard (S$1,990) is often enough to replace a simple internal APK.
Frequently asked questions
Google says protections began on 30 September 2026 for users in Brazil, Indonesia, Singapore and Thailand, on certified Android devices running Android 7 or higher. The first phase checks installs from seven participating app stores, including Google Play and Samsung Galaxy Store. Google plans to expand verification to all apps on certified devices globally in 2027.
The first phase covers installs from participating app stores, and Google says it will expand checks to all apps on certified devices in 2027. Apps from unverified developers can still be installed with the advanced flow, which has a 24-hour wait, or with ADB. For a business, registering the app or using managed devices is the safer route.
Google's FAQ says apps distributed through your organisation's store on managed devices do not need to complete the verification requirements, because your IT admin has vetted them. Google still recommends registering and claiming those apps, so installs go smoothly if the app is ever downloaded from another source.
Google charges a US$25 fee for a full distribution account in Android Developer Console, similar to the Google Play registration fee. A limited distribution account for up to 20 authorised devices is free and does not need a government ID. Organisations also need a D-U-N-S number, which Dun & Bradstreet issues free of charge.
Google says that if you lose your signing key you will not be able to register your packages. If a package name is already in use and your key is not eligible, you can request registration with extra review, but Google suggests using a different package name. That usually means publishing the app again under a new name.