Android 15 could feature extra security to protect users from shady sideloaded apps

Android 15
(Image credit: Future)

We've been hearing a lot about Android 15 recently, and Google has confirmed that there’s an emphasis on privacy and security in this version of the mobile operating system. Part of that may include extra security features when side loading and installing apps from places other than the Google Play Store.

According to Mishaal Rahman at Android Authority, Android now contains code hinting at something called “Enhanced Confirmation Mode”. While the feature itself isn’t included in the Android 15 beta just yet, it seems it's designed to improve security surrounding app installation settings and expand upon Android 13’s Restricted Settings feature.

Restricted Settings was designed to limit the capabilities of apps users installed from anywhere other than Google Play. Specifically this stops users from being able to enable Accessibility or Notification Listener services for sideloaded apps — which helps improve data security when the source is unknown.

Enhanced Confirmation Mode will work in tandem with Restricted Settings to deny sideloaded apps access to sensitive data — in case that they come from a malicious source. Specifically it’s designed to prevent misuse of a session-based installation API, which exploits the system Android uses to determine whether an app came from Google Play or not.

Specifically it’s designed to prevent misuse of a session-based installation API, which exploits the system Android uses to determine whether an app came from Google Play or not.

It does this by checking an allowlist in the system settings, checking for an XML file that’s loaded into the factory image. Without this the app won’t be able to bypass these security restrictions and access services like Accessibility or Notification Listener. Any attempts to try will see a specific ECM dialog explaining that these permissions are not available.

However it’s unclear whether there will be an option to exempt certain apps with ECM, as is the case with Restricted Settings. It’s also unclear if well known third party app stores, like Amazon’s, will be exempt from these restrictions.

The ability to sideload on Android is a fantastic one, though it does come with plenty of risks. So it’s great to see that Google is doing what it can to keep your sensitive data safe, without restricting how and when you can install apps from unofficial sources.

The Android 15 beta is currently available to install to people with eligible devices, and we’ll be hearing more about the software at Google I/O 2024 next month. Android 15 itself isn’t expected to start rolling out until much later in the year— though it’s unclear exactly when. 

More from Tom's Guide

Category
Arrow
Arrow
Back to Mobile Cell Phones
Brand
Arrow
Storage Size
Arrow
Colour
Arrow
Condition
Arrow
Price
Arrow
Any Price
Showing 10 of 109 deals
Filters
Arrow
(128GB)
Our Review
1
Google Pixel 8 Pro - Unlocked...
Amazon
Our Review
2
Samsung Galaxy S24 Ultra 512...
Samsung
Our Review
4
Google Pixel 8 Pro - 128 GB
Verizon
(512GB)
Our Review
5
OnePlus - 12 512GB (Unlocked)...
Best Buy
(128GB)
Our Review
6
Pixel 8 Pro Bay 128GB...
Google Store NA
Our Review
7
Google Pixel 8 Pro - 128 GB
AT&T Mobility
Our Review
9
Samsung Galaxy S24 Ultra 256...
Visible
Low Stock
(Blue)
Our Review
10
Samsung Galaxy S24 Ultra 5G...
Walmart
Show more
Tom Pritchard
UK Phones Editor

Tom is the Tom's Guide's UK Phones Editor, tackling the latest smartphone news and vocally expressing his opinions about upcoming features or changes. It's long way from his days as editor of Gizmodo UK, when pretty much everything was on the table. He’s usually found trying to squeeze another giant Lego set onto the shelf, draining very large cups of coffee, or complaining about how terrible his Smart TV is.

Read more
Samsung Galaxy S25 Ultra hands-on
5 biggest Android upgrades for the Galaxy S25 — Now Bar, improved Circle to Search and more
OnePlus Open held in the hand.
Android 16 could bring triple-app multitasking — what you need to know
samsung galaxy one ui 7 beta screenshots
Samsung confirms today's Galaxy S25 launch will include a big One UI 7 software upgrade
android 16 logo on a samsung galaxy smartphone
One of Apple’s most controversial AI features could be coming to Android phones
Facebook, Instagram, YouTube, Pinterest, X, LinkedIn, Reddit, TikTok, Threads apps on an iPhone
Why you need to review your app permissions now
Android 16 screen-off fingerprint unlock in Settings menu
Android 16's latest beta lets all Pixel users unlock their phone more easily — here’s how
Latest in Android Phones
CAD renders of the Google Pixel 10
Pixel 10 could include a repurposed ‘Pixie’ assistant — but what actually happened?
Galaxy S25 Edge dummy unit from side angle
Samsung Galaxy S25 Edge design just shown off on video from every angle with seemingly accurate dummies
Google Pixel 9a next to Galaxy A56
Google Pixel 9a vs. Samsung Galaxy A56: Which sub-$500 phone should you get?
Samsung Galaxy Z Flip 6 review.
Samsung Galaxy Z Flip 7 design just teased in new cases leak — and the outer display is huge
Samsung Galaxy Z Flip 6 review.
Galaxy Z Flip 7 could finally fix the one thing that has prevented me from using Samsung’s flip phones
Motorola Razr Plus 2024 cover display
Motorola Razr Plus (2025) leaked specs hint at bigger upgrades — here's what we know
Latest in News
The Signal app logo displayed on an iPhone, with a screenshot of the Signal app in use displayed on a monitor in the background.
Signal — everything you need to know about the app at the center of the group chat scandal
Robert Downey Jr. revealed as Doctor Doom for "Avengers: Doomsday"
Marvel reveals 'Avengers: Doomsday' casting — follow the latest updates live
Wyze Cam v3
Wyze adds AI-powered filter to its security cameras to cut down on notifications that are “no big deal”
Mark Grayson (Steven Yeun) as Invincible in his blue suit during a scene from "Invincible" season 3 on Prime Video.
'Invincible' season 4 release window just announced — here's when it's coming
Microsoft Copilot app running on a phone with Microsoft logo in background
Microsoft 365 Copilot debuts new research tools for work: here's what that means
COLUMBUS, OHIO - JANUARY 26: Amber Glenn skates in the Women's Free Skate during the U.S. Figure Skating Championships at Nationwide Arena on January 26, 2024 in Columbus, Ohio. (Photo by Matthew Stockman/Getty Images)
Watch World Figure Skating Championships 2025 online – live stream, schedule, what TV channel is it on?