How to completely prohibit installation of applications from unknown sources on Android

Installing applications from unknown sources on Android is one of the main vulnerabilities that attackers use to distribute viruses, spyware and adware Trojans. Even if you are confident in the safety of the downloaded .apkfiles, an accidental error or data leak can lead to infection of the device. In this article, we will look at how permanently prohibit installation from unknown sources on smartphones from different manufacturers, why this is important for security, and what to do if the option is already activated by a virus.

It is important to understand: prohibition of installation from unknown sources is not just a recommendation, but a basic rule cyber hygiene. According to 2023 data, more than 60% of mobile threats are spread through manual installation of files, bypassing the official ones. However, many users do not even suspect that their device is vulnerable until it is too late. Next are detailed instructions for different versions Kaspersky by 2023, more than 60% of mobile threats are spread through manual installation APK-files, bypassing the official Google Play Market. However, many users do not even suspect that their device is vulnerable until it is too late. Below are detailed instructions for different versions. Android and brands, as well as answers to frequently asked questions.

Why you need to disable installation from unknown sources

The main danger lies in the operating mechanism Android: the system by default blocks the installation of applications from outside, but allows it with manual confirmation. This means that all it takes is one careless click and your device could end up with malware. Here are the key risks:

• 🦠 Viruses and Trojans: Files .apk often contain hidden scripts that steal bank card data, logins or spy on the user.
• 📱 Loss of control over the device: Some viruses block the screen, demanding a ransom, or replace system ones settings.
• 🔄 Automatic installation of advertising: Even “harmless” APK can harbor adware (reklamnoe software) that will flood the phone with banners.
• 🚫 Blocking antiviruses: Malware often disables protection, making the device even more vulnerable.

According to Check Point, in 2026, every fifth file downloaded from third-party sources contained a threat. At the same time APK-the file downloaded from third-party sources contained a threat. At the same time 90% of users they don’t even check the files with an antivirus before installation. If you have ever installed applications from APKMirror, Uptodown or other third-party sites, your device is already at risk.

⚠️ Attention: Some viruses disguise themselves as legitimate applications (for example, modified versions WhatsApp or Telegram). They may request permission to install from unknown sources under the guise of “security updates.” Never confirm such requests!

How to check whether installation from unknown sources is allowed

Before disabling an option, make sure that it is activated at all. The path to the settings depends on the version Android and shell of the manufacturer. Here are the universal verification methods:

For Android 8.0 Oreo and newer

Starting from Android 8.0, Google has changed the logic of working with unknown sources. Now permission is granted separately for each application (for example, for a browser Chrome or file manager). To check:

1. Open Settings → Applications and notifications.
2. Tap on Advanced → Special access → Install unknown applications.
3. View the list of applications. If next to any of them there is a switch in position Allowed, then installation from unknown sources is active.

For Android 7.0 Nougat and older

In earlier versions, the option was global. To find it:

1. Go to Settings → Security (or Settings → Lock screen and security to Samsung).
2. Find item Unknown sources (may be called Installation from unknown sources).
3. If the slider is active, the option is enabled.

Features on smartphones of different brands

Brand	Path to settings	Features
Samsung (One UI)	Settings → Biometrics and security → Installing unknown applications	Permissions are issued separately for Galaxy Store, Chrome and file manager My Files.
Xiaomi (MIUI)	Settings → Applications → Manage applications → Application settings → Install unknown applications	In MIUI 12+ the option may be hidden behind the item Advanced.
Huawei (EMUI)	Settings → Security → Advanced settings → Install from unknown sources	Some models require entering a PIN code to change settings.
Google Pixel (Stock Android)	Settings → Applications → Special access → Installation of unknown applications	The "cleanest" interface without additional shells.

⚠️ Attention: On some firmware (for example ColorOS from Oppo/Realme) the path to the settings may differ. If you do not find the item, use the search in the settings (magnifying glass icon in the upper corner).

Step-by-step guide: how to prevent installation from unknown sources

The disabling process depends on the version Android and the shell. Below are universal instructions for all cases.

For Android 8.0+ (by application)

Since the permission is issued separately for each application, you need to disable it for all apps to which it was provided:

Open Settings → Applications and notifications → Advanced → Special access → Install unknown applications

Select the first application from the list (for example, Chrome or Files)

Move the slider to position Forbidden

Repeat for all applications in the list where installation is allowed -->

If the list is empty - This means that the option is already disabled globally. In this case, no additional actions are required.

For Android 7.0 and older (global disabling)

In older versions Android the option was controlled by one switch:

1. Go to Settings → Security by clicking Settings → Security.
2. Find an item Unknown sources and uncheck the box.
3. Confirm the action by clicking OK in the warning window.

On some devices (for example, Samsung Galaxy S7 or LG G5) the item may be called Installation from unknown sources and located in section Lock screen and security.

Special cases: the virus has blocked the settings

If your device is infected with a virus that:

• 🔒 Blocks access to security settings,
• 📵 Does not allow you to disable installation from unknown sources,
• 🔄 Automatically turns on the option after shutdown

you will have to act radically:

1. Start Safe Mode:

   Hold down the power button → Long press on "Turn off" → "Safe Mode"

   In this mode, the virus will not be active, and you can disable the option.

2. Uninstall suspicious applications:

   Go to Settings → Applications, sort by installation date and remove everything unfamiliar.

3. Reset settings:

   If the virus is not removed, reset to factory settings (Settings → System → Reset). Before resetting, save important data: after the procedure they will be deleted!

Additional security measures

Disabling installation from unknown sources is only the first step. To protect your device as much as possible, follow these steps:

1. Install an antivirus with real-time protection

Even if you do not install APKfiles, viruses can penetrate through:

• 📎 Attachments to WhatsApp/Telegram,
• 🌐 Infected sites (through browser vulnerabilities),
• 📂 Connectable USB drives.

Recommended antiviruses:

• 🛡️ Kaspersky Mobile Antivirus (free version with basic protection),
• 🔍 Bitdefender Mobile Security (paid, but with better threat detection),
• 📱 Malwarebytes (specializes in adware and spyware).

2. Configure Google Play Protect

Play Protect — built-in application scanning system from Google. To activate it:

1. Open Google Play Market.
2. Tap on the profile icon → Play Protect.
3. Enable options Scan device for security threats and Improve detection of malicious applications.

How does Play Protect work?

Play Protect scans installed applications in real time, comparing them with Google's database of known threats. If suspicious software is detected, the system either removes it automatically or warns the user. However, Play Protect does not replace a full-fledged antivirus - it is only effective against already known viruses.

3. Disable installation from the browser and instant messengers

Many viruses are distributed through:

• 🌐 Browsers (Chrome, Firefox, Opera),
• 💬 Messengers (Telegram, WhatsApp, Viber).

To block this loophole:

1. Go to Settings → Applications → Special access → Install unknown applications.
2. Select a browser or messenger from the list.
3. Disable installation permission APK.

What to do if you need to temporarily allow installation APK

Sometimes you need to install an application outside Google Play (for example, a beta version of a app or a specialized one) Software). data-i="213">Settings → Applications → Special access → Installation of unknown applications

1. Allow installation for only one application

On Android 8.0+:

1. Download APK-file, but do not open it.
2. Go to Settings → Applications → Special access → Install unknown applications.
3. Select the application through which you will install the file (for example, Files or Chrome).
4. Allow installation, install the application, then immediately turn off the permission back.

2. Check the file before installation

Use online services to check APK for viruses:

• 🔍 VirusTotal (download the file and wait analysis),
• 🛡️ APKCombo Analyzer (checks permissions and suspicious code).

⚠️ Attention: Never install APKdownloaded from:

• 📌 Unofficial telegram channels (even if they are positioned as “safe”),
• 🌐 Sites with hacked versions of paid applications (99% contain viruses),
• 💬 Messages from strangers in instant messengers.

If the file weighs suspiciously little (for example, WhatsApp.apk 2 MB in size instead of 50 MB) is a sure sign of a virus.

How to prevent installation APK on children's devices

If you are setting up a smartphone for a child, it is not enough to simply disable installation from unknown sources. Children may accidentally confirm the request or download a virus through advertising. That's what. do:

1. Activate parental control

Most devices have built-in tools:

• 📱 Samsung Kids (for Galaxydevices),
• 👶 Family Link from Google (works on all Androidsmartphones).

Through Family Link you can:

• 🔒 Block the installation of any applications without your confirmation,
• ⏰ Limit the time you use the device,
• 📊 View activity history.

2. Install a specialized launcher

Launchers for children (for example, Kids Place or Norton Family) create a “sandbox” where the child does not can:

• 📥 Download files from the Internet,
• ⚙️ Change system settings,
• 🔧 Install or remove applications.

3. data-i="255">(for kids) Google Play Market (for kids)

If a child is under 7 years old, you can completely block access to the store:

1. Go to Settings → Applications → Google Play Market.
2. Click Disable (or Uninstall updatesif the option is not available).
3. Set a password for the settings so that the child cannot turn it back on.

Common errors and how to avoid them

Many users make critical mistakes when setting up security. Here are the most common:

Error	Consequences	How fix
Installation permission APK for all applications	The virus can penetrate through any browser or instant messenger	Disable permission for all applications except the file manager (and then temporarily)
Ignoring updates system	Outdated version Android contains vulnerabilities that viruses exploit	Update to the latest version in Settings → System → Software update
Installing an antivirus from unknown source	The "medicine" may turn out to be a virus (a frequent trick of scammers)	Download antiviruses only from Google Play or official sites (Kaspersky, Bitdefender)
Storing passwords in the browser	The virus can steal saved logins and passwords	Use a password manager (1Password, Bitwarden) with two-factor authentication

⚠️ Attention: Some "optimizers" and "cleaners" (for example, Clean Master, DU Speed Booster) themselves contain advertising modules and may request dangerous permissions. Before installing, check reviews on 4PDA or Reddit.

FAQ: Answers to frequently asked questions

Can I completely block the installation? APK, even for yourself?

Yes, but this will require:

1. Disable installation from unknown sources for all applications (see instructions above).
2. Install an antivirus with an installation blocking function APK (for example, ESET Mobile Security).
3. Use ADB-command to completely block (only for experienced users):

   adb shell settings put global install_non_market_apps 0

⚠️ After executing the command, the installation APK will be blocked even after ADB, so use it only if you are confident in your actions.

The virus has enabled installation from unknown sources. How to remove it?

Follow the algorithm:

1. Reboot into safe mode (see instructions above).
2. Remove all suspicious applications (especially those that requested permission to Accessibility or Device Admin).
3. If the virus is not removed, perform a factory reset (Settings → System → Reset).
4. After reset do not restore data from a backup copy —the virus may return.

If the reset did not help, the virus may have entered the system files. In this case, only flashing the device will help.

Is it possible to install an application without the “Unknown” permission. sources"?

No, this is technically impossible. Android blocks the installation of any APKnot digitally signed. Google Play. The only exceptions:

• 📦 Applications installed via ADB (requires connection to a PC and USB debugging enabled).
• 🔧 System applications pre-installed by the manufacturer.

All other methods (for example, via Tasker or Automate) all also require temporary permission to install from unknown sources.

How to prevent APK installation on Android TV or tablet?

On Android TV (for example, on Nvidia Shield or Xiaomi Mi Box) the path to the settings is different:

1. Go to Settings → Device → Security and restrictions.
2. Find the item Unknown sources and disable it.
3. For individual applications (for example, Downloader or File Commander), the resolution is controlled in the same way as on a smartphone.

On tablets (for example Samsung Tab or Lenovo Yoga) the settings are identical to smartphones - see instructions above.

What should I do if, after disabling the option, I still see a request to install an APK?

Possible reasons and solutions:

• 🔄 Settings cache was not updated: Reboot the device.
• 📱 The manufacturer has changed the operating logic: On some devices (for example, Huawei or Xiaomi) you need to disable the option separately for Huawei AppGallery or Xiaomi GetApps.
• 🦠 The virus has changed the system settings: Check the device with an antivirus or perform a reset.
• 🛠️ Custom firmware: Unofficial firmware (for example, LineageOS) may have its own permission management mechanism. Check the details on the firmware forum.