Android is letting other app stores install apps with one tap from December 1 — how do you tell a registered store from a risky one?

From December 1, 2026, registered third-party Android app stores can offer one-tap installs and automatic background updates on Android 17 QPR2 and higher — but only after passing Google’s pre-qualification checks and malware scanning, and the first rollout in the announcement does not name the US, UK, or EU. Here is how registration works and the checks to run before trusting any store.

A message lands on your phone offering a new app store where everything installs with one tap — and soon some stores really will work that smoothly, which is why knowing which ones earned it matters. Short answer: Google has opened enrolment for its Registered App Store programme for third-party Android app stores. Starting December 1, 2026, on devices running Android 17 QPR2 and higher, a registered store can offer one-tap installs without secondary confirmation screens, plus automatic background updates and progress indicators, much like Google Play.

Why it matters: registration separates stores willing to accept oversight from stores that are not. To register, a store must complete Google's pre-qualification checks, pay an annual registration fee, submit its store app for malware scanning, declare mandatory policy pages, and keep sharing its complete app catalogue and updates with Google for malware review. Enrolment is optional — stores that do not register keep working as they do today.1.

Check your Android version first. The one-tap experience needs Android 17 QPR2 or higher, so do not expect the feature on an older phone.2. Only use a store you can verify is registered.

That smooth installing is earned through those checks — if you cannot confirm registration, treat the store like any unknown download.3. Keep a trusted default. Keep Google Play or your phone maker's store as your main source, and make any second store the exception.4.

Never install a store from a random link. A store app offered through a text, email, or pop-up link is the oldest trick going — close it and walk away.5. Know the limits.

The December rollout in this announcement covers eligible stores and countries outside the US, and the country list in coverage does not name the US, UK, or EU countries, so American readers may not see this on December 1. Uninstall a registered store and its apps stay on your phone but stop auto-updating until you reinstall it, and work-phone admins can block registered stores.Pro tip: One-tap install removes friction, not risk — easier installing makes checking who runs the store more important, not less.Ad’s take: I am all for more choice on a phone you paid for, but trust should be earned in writing. If a store wants your taps, it can start by putting its name on the registered list.