How to Allow (and Then Block) Unknown App Installs on Android
Quick answer: Modern Android versions block APK installs unless you allow a specific app, such as Chrome or Files, to “install unknown apps”. The safe approach is to allow it for one source, install the file you have checked, then switch the permission off again straight away. Never give this permission to messaging apps.
Where the setting is
The wording varies by phone maker, but it is usually under: Settings, Apps, Special app access, Install unknown apps. Choose the app you will open the APK with and toggle “Allow from this source”.
A safe sequence
- Check the APK first, using our APK checks and SHA-256 guide.
- Allow unknown installs for the one app you will use (for example Files).
- Install the APK.
- Return to the same setting and switch it off.
- Open Play Protect in the Play Store and run a scan.
Apps that should never have this permission
| App type | Why |
|---|---|
| WhatsApp, Telegram, SMS | Attackers send malicious APKs through messages |
| Unknown file managers | They can install files silently |
| Browser you rarely use | Easy to forget it is enabled |
What Play Protect warnings mean
If Play Protect says an app is harmful or unrecognised, take it seriously. “Unrecognised” means Google has not seen the app widely; “harmful” means it matches known malware behaviour. Do not disable Play Protect to force an install.
If you already left it on
Turn it off now for every app listed. Then check your installed apps for anything you do not recognise.
Frequently asked questions
Is it safe to allow unknown apps?
Only briefly, for one trusted source, and only for a file you have checked.
Why does my phone block the APK?
Android blocks unknown sources by default to protect you.
Do I need this for Play Store apps?
No. Play Store installs do not use this permission.