New Android update changes app store rules

Starting December 1, users in certain countries will be able to install apps from approved third-party app stores with a single press, without needing to confirm each installation step-by-step. This change applies only to devices running a beta version of Android 17 QPR2 or newer and to app stores that pay Google $10,000 annually.

Approval process for app stores

To qualify for the new one-tap installation feature, app stores must be part of Google's Registered App Stores program. This program, introduced in March during a conflict with Epic Games, grants automatic permissions to approved stores, allowing them to install and update apps in the background based on user settings.

Country-specific access

The new feature is available in some countries, including France, but not in the United States. Google bases access on the country linked to the user's account, not the user's physical location. If a user moves to a country not included in the program, they will revert to the standard installation process.

User consent and notifications

While users will still give their consent for each installation, they will do so with a single press instead of multiple confirmation steps. Stores must display visible notifications during installations and allow users to manually close them. They cannot install apps silently without any notification.

Enterprise control and app removal

In enterprise environments, IT administrators can block the installation of approved app stores on managed devices. However, Google has not specified if administrators can remove a store after it has been installed. If a user uninstalls an approved store, they retain the apps but lose automatic updates.

Store requirements and security checks

To qualify for the program, app stores must be affiliated with a registered organization and pass Google’s Android Developer Verification process. They must also pay $10,000 annually and upload their entire app catalog to Google’s servers for malware analysis. Google does not moderate the content itself but holds stores accountable for their catalogs.

Future security standards

Starting in 2027, approved app stores will also need to obtain and renew the MASA Level AL2 certification, a security framework from the App Defense Alliance. This certification ensures a higher standard of security practices and governance, though it does not guarantee complete freedom from malware.

Android 17 QPR2 and future updates

Android 17 QPR2 is a specific branch of the Android 17 operating system that includes changes to how app installations and permissions are managed. The one-tap feature relies on these system-level updates, which is why it is currently limited to devices running this version or newer. Google has not yet provided a date for the final release of the Android 17 update.