😱 Could this be the Death of Android? 🤬

[Snailsoft]

Google, the monopoly that created Android as an open-source platform, is about to slam the door on Free and Open Source Software.
Google's new forced security, "for your protection", takes away the option to side-load apps outside of Play Protect and Play Store.
I'm the creator of the game, Super Green Shattered Pixel Dungeon. I DO NOT use Playstore as Google makes demands that would make any honest programmer vomit with disgust. Now, unless Google approves my game, Android will no longer allow it to be installed. ONLY apps Google approves will be permitted on... well, lets face it, on their devices as it certainly won't be YOUR device any longer. No FOSS games will be allowed!
It gets worse.

MANY will be billed to use this forced protection for which you never asked.
It violates Cyber-Stalking laws, and will give corporations your personal data (assuming they haven't stolen it already through analytics and spyware that Google itself created).

• Google’s updated Play Integrity API is making it significantly harder for users with rooted phones or custom ROMs to access certain applications due to enhanced security verification's.
• The update, now rolling out by default as of May 2025, enforces stricter hardware-backed security signals for integrity verdicts on devices running Android 13 or later.
• While this change aims to protect apps from abuse, it negatively impacts legitimate power users and potentially those on older devices lacking recent security patches.

Compared to the billions of regular Android users, the number of people who root their Android phones or install custom ROMs is minuscule. While I wouldn’t say Google is actively hostile towards these power users, the company’s efforts to strengthen Android app security have the unfortunate side effect of negatively impacting their experience. Google’s latest update to the Play Integrity API, for example, makes it easier for developers to protect their apps from abusive users while also making it significantly harder for legitimate power users to utilize certain applications.
The Play Integrity API is a tool developers can use to verify that inbound interactions and server requests come from an unmodified version of their app binary running on a genuine Android device. Many developers use this API to mitigate app abuse that could lead to revenue or data loss. For example, the API can help prevent users from accessing premium content without paying, or it can help safeguard sensitive financial data by preventing access on devices that could potentially be compromised.

The problem for power users who root their phones or install a custom ROM lies in Google’s definition of a “genuine” Android device: one running a Google Play-certified build of Android. This definition inherently excludes nearly every custom ROM, prompting many custom ROM users to employ hacks to spoof certified builds. While many people who root their phones don’t install a custom ROM, they do unlock the bootloader as part of the rooting process. This step causes their devices to fail the more stringent Play Integrity checks, locking them out of many dining, medical, gaming, banking, and payment apps, as these types of apps often utilize the API’s stricter evaluations.

This means that power users who root their phones or install a custom ROM may suddenly find some apps stop working, especially on devices running Android 13 or later. Even users with unmodified Android 13+ devices might face problems if their devices haven’t received a software update in a while. This is because apps checking the “strong” integrity verdict require a recent security patch level to pass. This would effectively kill most v7 only apps and cripple millions of devices, forcing users to purchase new devices that Google supports. And why shouldn't they? It worked for Micro$oft and Apple.

Further, apps that auto update may no longer work.
Apps with self-modifying code will no longer work.
Most mods will no longer work.
And that isn't even the worst of it.

Google will be moving its approved apps to Cloud servers.
You will no longer install many apps. Your device will be required to connect online... in fact, your device will become nearly useless if not online, and you will rent apps from Google.
For modders, this is a death blow as we have no means to change server-side data.
This also means modders will no longer be able to remove malicious ad's, analytics, spyware, to make apps/games safe for you to use.

Google Play update: new layer of security coming in 2026

Lizzie
Google Community Manager
1 month ago
Hello everyone,

To enhance security on Android devices, Google has announced that developers of Android applications, including those distributed outside of the Google Play Store, will be required to complete developer verification in order for their apps to be installed on Android devices.

This new policy is designed to combat the spread of malware and financial fraud by increasing developer accountability.
Rollout starts in September 2026 for Brazil, Indonesia, Singapore, and Thailand. This requirement will be expanded globally in 2027 and beyond.

We understand that enterprise organizations often use off-Play methods of distribution methods for private applications. As such:

1. Applications installed on fully managed devices (DO) or within Work Profiles (BYOD and COPE) can continue to be installed, without developer verification, until September 2027. After this point, developer verification will be required for the app to be installed.
2. Applications installed by EMM Device Policy Controllers (DPCs) will be exempt from requiring developer verification indefinitely. (For example, apps installed via Workspace ONE Intelligent Hub, Intune Company Portal, SOTI MobiControl, etc.)
3. Private applications installed with Managed Google Play will be exempt from developer verification indefinitely.

Changes to Google Play for upcoming app store bills for users in applicable US states
A few U.S. states, currently Texas, Utah and Louisiana, have recently passed verification laws requiring app stores to verify users’ ages, obtain parental approval, and provide users' age information to developers. These laws also create new obligations for developers who distribute their apps through app stores in these states. The effective dates for these laws, applicable for both developers and Google Play, are quickly approaching and present short implementation timelines across the ecosystem.
While we have user privacy and trust concerns with these new verification laws, Google Play is designing APIs, systems, and tools to help you meet your obligations. Given the significant implications of these changes across the ecosystem, we are working to keep Play a trusted experience for everyone while also providing you information to support your preparations.
Our plan to support you
The first app store bill will take into effect in Texas on Jan 1, 2026, followed by Utah (Effective date: May 7, 2026) and Louisiana (Effective date: July 1, 2026), pending any other developments.
These laws impose significant new requirements on many apps that may need to provide age appropriate experiences to users in these states. These requirements include ingesting users’ age ranges and parental approval status for significant changes from app stores and notifying app stores of significant changes. It is important that you review these laws and understand your obligations.
To help you meet your obligations under these laws, we plan to provide:

• A New Play API: For users in these states, your app will be able to receive users’ age verification or supervision status, age ranges, and other applicable signals using the Play Age Signals API (beta).
• Play Console features: You will have the ability to notify Google Play of a significant change in Play Console without publishing a new version of your app. Additionally, you will also get a report in Play Console showing when a parent revokes approval for your app.
• Trust & safety requirements: To protect users, your use of this new API must comply with Google Play’s requirements governing how data from the API must be handled.

We will keep updating this page with new information. Check back here for the latest.
Planned dates and next steps (subject to change)

Key Dates	Milestone
October 2025	API requirements and a detailed integration guide with example code for the new Play API have been published for you to get started.
January 1, 2026	The new Play API will be live for applicable users in Texas when the Texas bill takes effect.
May 7, 2026	Utah bill goes into effect.
July 1, 2026	Louisiana bill goes into effect.

We would welcome your feedback on other application distribution methods used by your company and how this recent announcement will impact you.

The Android Enterprise Team

*Article updated 2 Dec 2025, by CM - minor text removal for clarity

 

[Sbenny]

That's shocking news. Indeed, many developers received today a warning mail from Google to update their google-play-api which means you can either obey or get your app removed from google play for "deprecated libraries usage".

 

[onasry]

if there is a will there is a way

 

[Snailsoft]

Another consideration for myself anyhow is that all future developement of Termux will cease as Google won't approve my custom version that is designed specificly to mod apps and destroy Google security.

Bypassing the API checks may be possible, however, bypassing server-side data won't be.

Too, without the ability to sideload apps, most of our modding tools will not work and the ones that do will no longer function.

One can do as I did on my Android 13 tablet, ADB it to disable all OS updates so that it doesn't change.
However, none of the new apps or even app updates will work.
And due to Google protecting you from their dangerous apps, no Android-on-Android emulators work now beyond Android 7.

That may all be moot anyhow with the planned shift to Cloud servers.
Along the same line of security as AppDome, portions of all "approved" apps will have a portion of their code removed and stored on secure cloud servers.
Without that code the app will not work on its own.
The only way to get the missing code is to pay Google to rent the use of their servers to "borrow" the missing code to make the app work.
Adaptive AI changes the location and encryption of the hijacked code, making sniffing it out over a network nearly impossible.
Google gets paid for the bandwidth, the cloud servers, and the rental, meanwhile not a penny goes to the developer.

As discussed above, one might install their own OS ROM and a custom Android, but that still won't allow new apps to be used.

The only thing that would be effective is a national boycott.
Everyone stop purchasing Android devices, stop using Android devices, and until such time as Google restores the opt-out option and holds to it.
Only the will Google listen.
Unfortunately, too many people have become addicted to or dependent upon their devices to do this.

 

[porsoli]

If this goes through, I'll drop scamdroid like a hot potato.

 

[Snailsoft]

F-Droid goes after Google.

F-Droid and Google's Developer Registration Decree
Updated Dec 5, 2025 by

marcprux
For the past 15 years, F-Droid has provided a safe and secure haven for Android users around the world to find and install free and open source apps. When contrasted with the commercial app stores — of which the Google Play store is the most prominent — the differences are stark: they are hotbeds of spyware and scams, blatantly promoting apps that prey on their users through attempts to monetize their attention and mine their intimate information through any means necessary, including trickery and dark patterns.
F-Droid is different. It distributes apps that have been validated to work for the user’s interests, rather than for the interests of the app’s distributors. The way F-Droid works is simple: when a developer creates an app and hosts the source code publicly somewhere, the F-Droid team reviews it, inspecting it to ensure that it is completely open source and contains no undocumented anti-features such as advertisements or trackers. Once it passes inspection, the F-Droid build service compiles and packages the app to make it ready for distribution. The package is then signed either with F-Droid’s cryptographic key, or, if the build is reproducible, enables distribution using the original developer’s private key. In this way, users can trust that any app distributed through F-Droid is the one that was built from the specified source code and has not been tampered with.
Do you want a weather app that doesn’t transmit your every movement to a shadowy data broker? Or a scheduling assistant that doesn’t siphon your intimate details into an advertisement network? F-Droid has your back. Just as sunlight is the best disinfectant against corruption, open source is the best defense against software acting against the interests of the user.
Google’s move to break free app distribution
The future of this elegant and proven system was put in jeopardy last month, when Google unilaterally decreed that Android developers everywhere in the world are going to be required to register centrally with Google. In addition to demanding payment of a registration fee and agreement to their (non-negotiable and ever-changing) terms and conditions, Google will also require the uploading of personally identifying documents, including government ID, by the authors of the software, as well as enumerating all the unique “application identifiers” for every app that is to be distributed by the registered developer.
The F-Droid project cannot require that developers register their apps through Google, but at the same time, we cannot “take over” the application identifiers for the open-source apps we distribute, as that would effectively seize exclusive distribution rights to those applications.
If it were to be put into effect, the developer registration decree will end the F-Droid project and other free/open-source app distribution sources as we know them today, and the world will be deprived of the safety and security of the catalog of thousands of apps that can be trusted and verified by any and all. F-Droid’s myriad users will be left adrift, with no means to install — or even update their existing installed — applications. (How many F-Droid users are there, exactly? We don’t know, because we don’t track users or have any registration: “No user accounts, by design”)
The Security Canard
While directly installing — or “sideloading” — software can be construed as carrying some inherent risk, it is false to claim that centralized app stores are the only safe option for software distribution. Google Play itself has repeatedly hosted malware, proving that corporate gatekeeping doesn’t guarantee user protection. By contrast, F-Droid offers a trustworthy and transparent alternative approach to security: every app is free and open source, the code can be audited by anyone, the build process and logs are public, and reproducible builds ensure that what is published matches the source code exactly. This transparency and accountability provides a stronger basis for trust than closed platforms, while still giving users freedom to choose. Restricting direct app installation not only undermines that choice, it also erodes the diversity and resilience of the open-source ecosystem by consolidating control in the hands of a few corporate players.
Furthermore, Google’s framing that they need to mandate developer registration in order to defend against malware is disingenuous because they already have a remediation mechanism for malware they identify on a device: the Play Protect service that is enabled on all Android Certified devices already scans and disables apps that have been identified as malware, regardless of their provenience. Any perceived risks associated with direct app installation can be mitigated through user education, open-source transparency, and existing security measures without imposing exclusionary registration requirements.
We do not believe that developer registration is motivated by security. We believe it is about consolidating power and tightening control over a formerly open ecosystem.
The Right to Run
If you own a computer, you should have the right to run whatever programs you want on it. This is just as true with the apps on your Android/iPhone mobile device as it is with the applications on your Linux/Mac/Windows desktop or server. Forcing software creators into a centralized registration scheme in order to publish and distribute their works is as egregious as forcing writers and artists to register with a central authority in order to be able to distribute their creative works. It is an offense to the core principles of free speech and thought that are central to the workings of democratic societies around the world.
By tying application identifiers to personal ID checks and fees, Google is building a choke point that restricts competition and limits user freedom. It must find a solution which preserves user rights, freedom of choice, and a healthy, competitive ecosystem.
What do we propose?
Regulatory and competition authorities should look carefully at Google’s proposed activities, and ensure that policies designed to improve security are not abused to consolidate monopoly control. We urge regulators to safeguard the ability of alternative app stores and open-source projects to operate freely, and to protect developers who cannot or will not comply with exclusionary registration schemes and demands for personal information.
If you are a developer or user who values digital freedom, you can help. Write to your Member of Parliament, Congressperson or other representative, sign petitions in defense of sideloading and software freedom, and contact the European Commission’s Digital Markets Act (DMA) team to express why preserving open distribution matters. By making your voice heard, you help defend not only F-Droid, but the principle that software should remain a commons, accessible and free from unnecessary corporate gatekeeping.

 

[Snailsoft]

As of this week, Google has started to roll out new security updates that are crippling mods, disabling side-loading, and uninstalling apps without your consent.

Android’s open nature set it apart from the iPhone as the era of touchscreen smartphones began nearly two decades ago. Little by little, Google has traded some of that openness for security, and its next security initiative is the biggest concessions yet in the name of total control. Google has announced plans to begin verifying the identities of all Android app developers, and not just those publishing on the Play Store. Google intends to verify developer identities no matter where they offer their content, and apps without verification won’t work on most Android devices in the coming years.

Members here and at other modding sites are already reporting working mods suddenly failing and vanishing after this "security update".

APK mirroring site are reporting apk's not installing unless installed directly from Playstore.

What can you do?
Not a lot that doesn't involve sacrifice.
Much like on PC, the best way to enjoy Windows is to remove/replace all things Micro$oft, now the only way to enjoy Android is to remove Google

Things you can do to protect YOUR property...

Turn on airplane mode and stay off the network. Extreme and not realistic for most.

Install a firewall and block the update service and Google service.

Adguard Premium Block Ads Without Root v4.14.21 (Nightly) (updated) Mod apk

Adguard Premium Block Ads Without Root v4.14.21 (Nightly) (updated) Adguard Premium Block Ads Without Root v4.14.21 Credits to: KSCTType of release: Paid Download Link (how to download?)-=Stripped Content=- THE WORLD'S MOST ADVANCED AD BLOCKER! AdGuard is the best...

forum.sbenny.com

These two services at the least must never be allowed network access.

The down side is no more upgrades and some apps may stop working.

A VPN is not a firewall.
Disabling system updates won't do as security updates are mandatory.

You can try running all your mods in a VM

🤖 Virtual Master - Android on Android VR v3.2.39 for Android 15 up 🤖 Mod apk

🤖 Virtual Master - Android on Android VR v3.2.39 for Android 15 up 🤖 Virtual Master - Android Clone v3.2.39 Credits to: SnailsoftType of release: Paid Download Link-=Stripped Content=- Virtual Master runs another Android System on your device, based on our Android...

forum.sbenny.com

Android 9 is the most stable at this time. Not all mods will work.
Not all devices can handle a VM.

You could replace Google's Trojan with MicroG, however it requires a rooted device.

How to Remove Google Play Services and Install microG

In this guide, we will show you the steps to remove Google Play Services from your device and install microG.

droidwin.com

If you already received the Trojan in an update, there's little that can be done other than backup your apps and try one of the mentioned options.

More will be posted as events unfold.

@Sbenny

 

[taylorjess89]

As of this week, Google has started to roll out new security updates that are crippling mods, disabling side-loading, and uninstalling apps without your consent.

Android’s open nature set it apart from the iPhone as the era of touchscreen smartphones began nearly two decades ago. Little by little, Google has traded some of that openness for security, and its next security initiative is the biggest concessions yet in the name of total control. Google has announced plans to begin verifying the identities of all Android app developers, and not just those publishing on the Play Store. Google intends to verify developer identities no matter where they offer their content, and apps without verification won’t work on most Android devices in the coming years.

Members here and at other modding sites are already reporting working mods suddenly failing and vanishing after this "security update".

APK mirroring site are reporting apk's not installing unless installed directly from Playstore.

What can you do?
Not a lot that doesn't involve sacrifice.
Much like on PC, the best way to enjoy Windows is to remove/replace all things Micro$oft, now the only way to enjoy Android is to remove Google

Things you can do to protect YOUR property...

Turn on airplane mode and stay off the network. Extreme and not realistic for most.

Install a firewall and block the update service and Google service.

Adguard Premium Block Ads Without Root v4.14.21 (Nightly) (updated) Mod apk

Adguard Premium Block Ads Without Root v4.14.21 (Nightly) (updated) Adguard Premium Block Ads Without Root v4.14.21 Credits to: KSCTType of release: Paid Download Link (how to download?)-=Stripped Content=- THE WORLD'S MOST ADVANCED AD BLOCKER! AdGuard is the best...

forum.sbenny.com

These two services at the least must never be allowed network access.
View attachment 106266
The down side is no more upgrades and some apps may stop working.

A VPN is not a firewall.
Disabling system updates won't do as security updates are mandatory.

You can try running all your mods in a VM

🤖 Virtual Master - Android on Android VR v3.2.39 for Android 15 up 🤖 Mod apk

🤖 Virtual Master - Android on Android VR v3.2.39 for Android 15 up 🤖 Virtual Master - Android Clone v3.2.39 Credits to: SnailsoftType of release: Paid Download Link-=Stripped Content=- Virtual Master runs another Android System on your device, based on our Android...

forum.sbenny.com

Android 9 is the most stable at this time. Not all mods will work.
Not all devices can handle a VM.

You could replace Google's Trojan with MicroG, however it requires a rooted device.

How to Remove Google Play Services and Install microG

In this guide, we will show you the steps to remove Google Play Services from your device and install microG.

droidwin.com

If you already received the Trojan in an update, there's little that can be done other than backup your apps and try one of the mentioned options.

More will be posted as events unfold.

@Sbenny

Here's a clarification of what is actually happening according to both co pilot and gemeni.

1. The "Developer Verification" Initiative (Partially True)
Google has officially announced a new Android Developer Verification policy.
The Fact: Starting in 2026 (rolling out globally through 2027), Google will require developers who distribute apps outside the Play Store to verify their identities (ID checks, addresses, etc.) and register their app package names.
The Impact: If a developer remains anonymous and unverified, their APKs will be blocked from installing on "certified" Android devices (most consumer phones).
The "Advanced Flow": Following backlash, Google announced an "advanced flow" for power users. This will still allow you to sideload unverified apps, but it will involve multiple warning screens to prevent regular users from being "socially engineered" into installing malware.
2. "Uninstalling Apps Without Consent" (Misleading)
Google does not arbitrarily delete apps you want. However, two things are being conflated:
Play Protect: If an app is identified as known malware (like a banking trojan), Google Play Protect can disable or remove it to protect your data. This has been a feature for years.
App Warnings: In December 2025, updates to the Play Store (v49.1) introduced more aggressive warnings for apps that fail integrity checks. Google is also making it harder to "uninstall updates" for system apps through the Play Store, forcing users to go through deep system settings instead.
3. "Crippling Mods" and "Disabling Sideloading" (Exaggerated)
Integrity Checks: Many modern apps (like banking, Netflix, or even ChatGPT) now use the Play Integrity API. If this API detects that an app was sideloaded or that the device is "compromised" (rooted/modded), the app itself may refuse to run.
Not a "Block" on Sideloading: You can still sideload. The issue is that individual apps are choosing to "lock themselves" if they aren't installed via the Play Store. This is a developer choice, not a global Android block.
Summary of the Situation
Identity Verification True Mandatory for all devs (even off-Play Store) by 2026/2027.
Sideloading is Dead False It's becoming more difficult/warned, but an "Advanced Flow" remains.
Uninstalling without consent Misleading Only applies to confirmed malware via Play Protect.
Mods are failing True

Due to Play Integrity API, not a specific "mod-killing" update.

 

[taylorjess89]

1. Verification & Sideloading Policies
These links confirm the shift toward mandatory developer registration and the new installation warnings.
* Official Policy: Android developer verification | Android Developers
* Sideloading Changes: Android will let ‘experienced users’ sideload unverified apps as Google makes case for verification
* F-Droid Concerns: About Android Sideloading Apps Policy Changes
2. Play Integrity (The "Mod Killer")
These explain the technology that detects if your phone is rooted or using modified apps.
* Technical Overview: Play Integrity API | Android Developers
* Root Fix Discussion: 3. Protection Tools (Firewalls)
If you want to block Google’s update services without going into Airplane Mode, these are the top recommended open-source firewalls.
* NetGuard (No Root): GitHub - M66B/NetGuard: A simple way to block access to the internet per app
* AFWall+ (Requires Root): GitHub - ukanth/afwall: AFWall+ (Android Firewall +) - iptables based firewall for Android
* Firewall Guide: https://android.gadgethacks.com/how-to/use-firewall-keep-data-hungry-apps-check-0165982/
4. Advanced User Settings
To maintain control over your device, you should ensure Developer Options are enabled to allow for USB debugging and OEM unlocking.
* Enable Dev Mode: Configure on-device developer options | Android Studio | Android Developers

 

[Snailsoft]

Sideloading is Dead False It's becoming more difficult/warned, but an "Advanced Flow" remains.
Uninstalling without consent Misleading Only applies to confirmed malware via Play Protect.

Google and those paying Google decide what qualifies, not the owner.
Modded games having PayPal donation get flagged sometimes as banking apps and are removed without consent.

It's good to hear enough people complained about side-loading that Google relented, though none of the sources I follow say they implemented this relax policy.

What the media says and what monopoly corporations do is often in conflict.
I look at facts.
Google said they are taking control of Android devices, forcing security changes, and crippling apps.
As of this week, this is what is being done as reported by many sources.

Modding games for fun has become a security and control war.

 

[Snailsoft]

If an Iranian security programmer decided that for your safety he was going to install a Trojan (by any other name) that allowed him to control your phone, decide what you can or cannot do on your phone and removed apps without your consent, most nations would call that cyber terrorism.
Oh, but make it a corporation and it's okay?
Sorry. Don't buy into that.
And with every little win, the indoctrination continues.
My device. My choice. Not some Corporation.

 

[AnnaEnea]

I have no more words for this damn play store!