Installing applications from unknown sources is one of the most common reasons for infecting smartphones on Android viruses, spyware and advertising Trojans. Even if you are confident in the security of the downloaded .apkfile, the very possibility of installing it opens the door to cyber threats. Manufacturers are actively fighting this, but the final decision remains with the user. Google Play Protect They are actively fighting this, but the final decision remains with the user.

In this article you will find current ways to disable APK installation from unknown sources on different versions Android (from Android 8 Oreo to Android 15), and also learn why this is critical for security. We will analyze the nuances for devices Samsung, Xiaomi, Huawei and other brands, where the interface may differ from the “pure” Android. If you have ever installed applications outside Google Play, these instructions will help you regain control over the security of your device.

Why you need to disable installation from unknown sources

The main danger is that that more than 60% of malware for Android is distributed through APK files downloaded outside the official store (data Kaspersky for 2023). Even if you downloaded a file from a trusted site, it could have been replaced or modified during the download stage. Here are the key risks:

  • 🦠 Viruses and Trojans: from data theft to blocking the device with a ransom demand.
  • 👁️ Spyware: apps can spy on your passwords, messages and geolocation.
  • 💸 Advertising bots: aggressive advertising that replaces banners in other applications.
  • 🔄 Auto-updating malware: some viruses independently download new versions, bypassing antiviruses.

Manufacturers Android specially complicate the installation process from unknown sources so that users think twice about this step. For example, Android 13+ requires you to confirm permission for each individual APK file, and not for the entire browser or file manager.

⚠️ Attention: Disabling this feature does not guarantee 100% protection. Viruses can also penetrate through official applications (for example, through vulnerabilities in WebView or advertising SDKs). Always update Android and use trusted antivirus software.

How to check if installation from unknown sources is enabled

Before disabling a feature, make sure it is active. Verification methods depend on the version Android:

Android version Where to look Signs of an enabled mode
Android 8–10 Settings → Security → Unknown sources Switch next to the name browser/file manager in position ON.
Android 11–12 Settings → Applications → Special access → Installation of unknown applications The list of applications contains those for which APK installation is allowed.
Android 13+ Settings → Security and privacy → Advanced → Installing unknown applications When you try to install an APK, a request for permission for a specific file appears.

If you see applications like Chrome, Files by Google or Telegram with permission to install APK in the settings, the function is active. In Android 13+ the check becomes more complicated: the system may not show the global switch, but ask for permission each time you try to install.

📊 How often do you install APKs from unknown sources?
Never
Nearby (1-2 times a year)
Often (once a month)
Constantly (weekly)

Disabling APK installation on pure Android (Pixel, Motorola, Nokia)

Devices with "clean" Android (without shells from manufacturers) have standard shutdown path. The instructions are relevant for Pixel 6/7/8, Motorola Edge, Nokia G-series and others:

  1. Open Settings (gear icon in the application menu).
  2. Go to section Security and privacy (on some devices simply Security).
  3. Select Advanced (if available) → Install unknown applications.
  4. In the list applications, find those for which APK installation is allowed (for example, Chrome, Files, Telegram).
  5. Tap on the application and move the switch to position Off

In Android 14 and newer, confirmation via PIN code or fingerprint is an additional security measure. If you do not see the Installing unknown applicationssection, try using the search in the settings (magnifying glass icon at the top).

Security settings are open|Section "Install unknown applications" is found|Permissions are disabled for all browsers/file managers|Checked by trying to install a test APK-->

⚠️ Attention: On some devices (for example, Pixel s beta version Android 15) the path may differ. If you are participating in the beta testing app, check the official documentation Google.

Disablement features on Samsung (One UI)

Shell One UI from Samsung has its own security logic. Here the permission to install the APK can be hidden deeper, and some functions are duplicated. Instructions for Galaxy S23, Galaxy A54, Galaxy Z Fold 5 and others:

  1. Open Settings → Applications.
  2. Click on the three dots in the upper right corner and select Special access.
  3. Tap Install unknown applications.
  4. Find applications in the list with resolution (for example, Samsung Internet, My Files) and disable the switch.

B One UI 6.0+ (based on Android 14) Samsung has added an additional layer of protection: the first time you try to install an APK, the system displays a warning detailing the risks. However, this does not replace completely disabling the function.

If you are using Samsung Knox (corporate devices), access to these settings may be restricted by the administrator. In this case, contact your organization's support team.

What to do if the "Install unknown applications" section is missing?

On some devices Samsung c One UI 5.1 and below this section may be called Installation from unknown sources and located in Settings → Security. If it is not there, try updating the firmware via Settings → Software update.

Disable on Xiaomi (MIUI), Redmi and POCO

Xiaomi traditionally has a non-standard approach to security settings in MIUI 14/15 (for Xiaomi 13, Redmi Note 12, POCO F5) the path looks like this:

  1. Go to Settings → Applications → Manage applications.
  2. Select a tab Special permissions (or Application permissions).
  3. Find Installing packages from unknown sources.
  4. Disable permission for all applications in the list (for example, Browser, Files, Downloads).

In MIUI there is a feature: even after disabling, the system may offer to install an APK when opening a file. This is not an error - simply Xiaomi adds an additional warning. To completely block the feature, you need to:

  • 🔒 Enable Installation blocking in the security settings (if available).
  • 🛡️ Activate MIUI Protection (Settings → Memory and security → MIUI Protection).
💡

On devices Xiaomi with global firmware (Global ROM), resetting security settings sometimes helps: Settings → About phone → Reset → Reset security settings. This will not delete your data, but will return all permissions to factory settings.

Huawei, Honor and other brands: where to look for settings

Devices Huawei and Honor (on EMUI/Magic UI) have their own menu structure. For Huawei P60, Mate 50, Honor 90 and others:

  1. Open Settings → Security and privacy.
  2. Go to Advanced (or System Security).
  3. Select Install from unknown sources.
  4. Disable permission for all applications in list.

On Huawei s HarmonyOS (for example, Mate 60) the path may differ:

Settings → Applications → Manage applications → Permissions → Installation from unknown sources

For brands Oppo, Realme, Vivo and OnePlus (on ColorOS/Funtouch OS/OxygenOS) the general scheme is as follows:

  • 📱 Oppo/Realme: Settings → Applications → Special permissions → Installing unknown applications.
  • 📱 Vivo: Settings → Security and privacy → Application sources.
  • 📱 OnePlus: similar to "pure" Android, but with additional confirmation via Face Unlock.
⚠️ Attention: On some devices Huawei i Honor with Chinese firmware (CN ROM), the security section may be hidden. In this case, you will need to change the firmware region or use Huawei Mobile Services (HMS) to update.

What to do if the APK installation is still the same possible

If after disabling all permissions you can still install APK, the reasons may be as follows:

  1. System applications with superuser rights: some manufacturers (for example, Xiaomi or Meizu) leave "loopholes" for their file managers.
  2. ADB commands: if you previously gave permission via adb install, it could be saved.
  3. Custom firmware: in LineageOS, Pixel Experience and others In unofficial builds, security settings can be changed.

Solutions:

  • 🔧 For ADB: run the command: 
    adb shell settings put global install_non_market_apps 0

    (developer rights are required and USB debugging enabled).

  • 🔄 For custom firmware: check the settings in the developer menu (Settings → About phone → Build number - tap 7 times to unlock).
  • 🛡️ Install a third-party antivirus (for example, Malwarebytes or Bitdefender), which blocks the installation of untrusted APKs.

If the problem persists, perform a factory reset (Settings → System → Reset settings), saving the data first.

💡

Even after disabling all permissions Android may allow the installation of APKs for system applications (for example, Package InstallerIn this case, only manual removal of rights via ADB or a reset will help.

FAQ: Frequently asked questions about installing APKs from unknown sources

Can I temporarily enable the installation? APK, and then disable it?

Yes, but this is not safe. The Android 13+ system remembers which applications had permission and can automatically restore it. It is better to use virtual machine (for example, BlueStacks) to test the APK.

Why do some applications (for example, Fortnite) require installing an APK?

Some games and apps are distributed outside Google Play due to commission policies (30%) or regional restrictions. However, even such APKs can be faked. Always check. data-i="255">file on the official website. hash sum file on the official website.

How to check an APK for viruses before installation?

Use online scanners like VirusTotal or MetaDefender. You can also upload the file to the sandbox (SandBoxie) on your PC. But remember: There is no 100% protection - some viruses are activated only after installation.

What to do if I have already installed malicious software application?

Immediately:

  1. Uninstall the application via Settings → Applications.
  2. Scan your device with an antivirus (Kaspersky, Dr.Web).
  3. Change passwords for important services (bank, mail, social networks).
  4. If the device is locked, reset via Recovery Mode.

Do these instructions work for Android TV or tablets?

Yes, but the path may differ. For example, on Android TV (for example, Nvidia Shield or Xiaomi Mi Box) you need to go to Settings → Security and restrictions → Unknown sources. On tablets (Samsung Tab, Lenovo Yoga) - similar to smartphones.