Google is introducing new capabilities for approved third-party Android app stores, allowing them to install applications with a single tap and deliver updates in the background without displaying Android’s usual confirmation screens.
Under the new Registered App Stores program, third-party app marketplaces can apply to Google for special installation privileges. However, they must meet Google’s identity verification, security scanning, and compliance requirements to qualify.
The new features will become available starting December 1, 2026, but only on devices running Android 17 QPR2 or later in supported countries. The United States is currently excluded from the program.
Google Simplifies Third-Party App Installation on Android
Currently, Android users installing applications through third-party app stores must manually grant permission to the store to install apps. They must also confirm individual installations and updates through Android’s standard security prompts.
With the new program, approved app stores will automatically receive the necessary installation permissions after completing Google’s registration process.
This will allow users to install applications with a single tap while enabling approved marketplaces to deliver updates in the background, based on the user’s update preferences.
Google first announced the initiative in March 2026 alongside changes that the company said resolved its disputes with Epic Games.
Participation in the program is optional. Third-party app stores that do not register will continue operating under Android’s existing installation and update procedures.
Google Introduces Security Requirements for Registered App Stores
Although the program simplifies app distribution, Google is introducing several security requirements to prevent malicious applications from entering third-party marketplaces.
App stores seeking approval must undergo identity verification and submit their complete application catalogs to Google for ongoing malware screening. They must also submit every new application and update for security checks.
Google’s requirements include:
- Developer identity verification: App stores must register as organizations and maintain verified developer identities through Google’s Android developer verification program.
- Application catalog screening: Stores must submit their complete app catalogs, including new applications and updates, for Google’s malware screening.
- Security compliance: Store operators must actively prevent malware and potentially harmful applications from appearing in their marketplaces.
- Vulnerability remediation: Registered stores must address significant security vulnerabilities brought to their attention.
- Independent marketplace operations: Stores cannot prevent users from installing competing app marketplaces, interfere with their operations, or hide or modify Android security notifications.
- App version verification: Each store must submit every version of its own application for malware screening, ensuring that the submitted version matches the one distributed through its website and other channels.
- Annual registration fee: Participating stores must pay Google an annual fee of $10,000 before the review process begins.
Despite Google’s screening requirements, each registered app store remains responsible for the applications distributed through its platform. Google will not moderate the content hosted by registered marketplaces.
Google Requires User Consent for Every App Installation
Despite the introduction of one-tap installation and background updates, Google will continue requiring explicit user consent for individual app installations.
Registered stores are not permitted to install applications silently without the user’s permission.
Additionally, large downloads and background installations must display visible notifications while the process is running.
If an installation is initiated from another device, the app store must also display a notification on the user’s device that cannot be automatically dismissed.
These requirements are designed to maintain user awareness and control while reducing unnecessary installation prompts.
Google Can Charge Additional Fees for Stores Distributing Harmful Apps
Google has also introduced additional financial penalties for app stores that fail to maintain acceptable security standards.
If more than 1% of installation attempts or more than 2% of an app store’s catalog are identified as potentially harmful within a 30-day period, Google may impose additional fees to cover the costs of screening and cleaning up the marketplace.
App stores that violate program requirements, including failing to pay their annual fees on time, may be suspended or removed from the Registered App Stores program until the issues are resolved.
Google says participating stores will receive prior notice and an opportunity to address compliance violations before removal.
However, Google’s published program documentation does not provide detailed information about its malware-scanning methodology, the time required to screen newly submitted applications, or the specific results shared with participating stores.
Android Developer ID API Adds Another Layer of Security
Registered app stores will also gain access to Google’s Android Developer ID API, which allows them to verify whether applications in their catalogs originate from verified developers and are eligible for installation.
Google recommends that participating marketplaces block installations of applications that fail these verification checks.
The Android developer verification initiative operates separately from the Registered App Stores program and is currently in its initial rollout phase.
According to Google, seven app stores are participating in the first phase. Since September 30, certified Android devices in Brazil, Indonesia, Singapore, and Thailand have been checking whether applications distributed through those stores come from verified developers.
Google plans to expand developer verification checks worldwide in 2027.
Android 17 QPR2 Required for the New Features
The availability of one-tap installations and automatic background updates will depend on both the user’s home country and the Android version running on their device.
The features require Android 17 QPR2 or later and will initially be available only in countries supported by Google’s program.
Google has clarified that temporarily traveling to a country where the program is unsupported will not disable one-tap installations or automatic updates for eligible users.
Android 17 QPR2 is part of Google’s quarterly platform release schedule. Its latest version, released on October 16, remains in beta, and Google has not yet announced a final stable release date.
Google Introduces Separate Third-Party App Store Distribution Program in the US
Although the Registered App Stores program does not currently support the United States, Google has introduced a separate initiative for distributing third-party app stores through Google Play.
The separate program has been operational since July 22, providing another route for third-party marketplaces to reach Android users in the U.S.
Overall, Google’s latest changes represent an effort to simplify third-party app distribution while maintaining security oversight through developer verification, malware screening, and mandatory user consent.
The new approach could make alternative Android app stores more convenient for users while introducing additional compliance responsibilities and costs for marketplace operators.
