To install an APK on Android, you need to turn on a single permission for the app that will open the file (your file manager or browser), install the APK, and then turn that permission back off. The setting is called “Install unknown apps” and is found in Settings → Apps → Special app access on Android 8.0 and later. After you install the APK, go back to that same screen and toggle the permission off for that app.
What the Permission Actually Means
Android’s permission system controls which apps can access specific APIs or system functions. The permission you are enabling is called REQUEST_INSTALL_PACKAGES, and it allows an app to request that another package (the APK) be installed. Google Play restricts this sensitive permission for apps distributed through its store, but when you sideload an APK from a source like F-Droid or APKMirror, you are manually granting that permission to the app that will handle the installation.
When you enable “Allow from this source” for your file manager or browser, you are not giving that app permission to install anything automatically. You are telling Android that you trust that app to show you installation prompts. Every time you tap an APK file, Android will still ask you to confirm the installation. The permission only allows the app to request the install; it does not let it install silently.
How to Turn It Off Again
After you finish installing the APK, go to Settings → Apps → tap the app you used (for example, your file manager or Chrome) → “Install unknown apps” → toggle “Allow from this source” to off. This is the same path documented by iTechGuides and other how-to pages. The permission is not automatically revoked, so you must do this manually. Leaving it on does not cause immediate harm, but it means that app could theoretically show you an installation prompt at any time, which is why Google recommends turning it off when you are done.
What People Get Wrong About Sideloading
The most common mistake is thinking you need to toggle a global “Unknown sources” switch. That was true on Android 7 and earlier, but since Android 8.0, the permission is per-app. You enable it only for the specific app that will open the APK file, not for the whole system. Another mistake is assuming that once you install an APK, the permission stays on forever. It does not, you control it, and you should turn it off after each use.
Some users also think sideloading is inherently dangerous. It is not, as long as you get the APK from a trusted source. APKMarkhor and DroidInsights both explain that the risk comes from the APK itself, not from the act of installing it. If you download from a site that redistributes official APKs without modification, like APKMirror, the risk is low. If you download from a random forum, the risk is higher.
What to Check Before You Install
Before you tap “Install,” check the permissions the APK requests during installation. Android shows you a list of permissions the app will have access to. If a flashlight app asks for your contacts and location, that is a red flag. Legitimate apps from Google Play or F-Droid will ask for permissions that match their function. The same applies to APKs from APKMirror, compare the permission list to the version on Google Play if one exists.
Also check the APK’s signature. Android Developer documentation explains that a signed APK is required for installation. If the APK is unsigned or uses a mismatched signature, Android will refuse to install it. Most reputable APK sites verify signatures before hosting files. If you see a warning that the APK is unsigned, do not install it.
Where to Get APKs That Are Free and Legal
F-Droid is a repository of free and open-source Android apps. Every app on F-Droid is free, does not require an account or a credit card, and works worldwide. The apps are built from source code, so you know exactly what you are installing. F-Droid also handles the permission model for you, you install the F-Droid client from its website, and then the client manages APK downloads and installations.
APKMirror hosts official APKs from developers, including apps that are free on Google Play. It does not require an account or a card. APKMirror verifies signatures against the original developer’s signature, so you can be confident the APK has not been tampered with. It works in most countries, though some apps may have regional restrictions that are enforced by the app itself, not by the site.
DownloadAPK is another site that hosts APK files, but it is less curated than APKMirror. It does not require an account or a card, but it does show advertisements. The site works worldwide, but you should double-check the APK’s permissions and signature before installing, because the verification process is not as strict as APKMirror’s.
For developers and advanced users, Android Googlesource hosts the Android source code, including system APKs. This is not a consumer service, it is a code repository, but if you need a system APK for a specific Android version, you can find it there. No account or card is required, and it works everywhere.
Frequently Asked Questions
Do I need to root my phone to install an APK?
No. Sideloading an APK does not require root access. You only need to enable the “Install unknown apps” permission for the app that will open the APK file. Rooting is a separate process that gives you full system access and is not needed for installing APKs.
Will installing an APK void my warranty?
Installing an APK by itself does not void your warranty. However, if you root your phone or modify system files, that can void the warranty. Sideloading an APK is a standard Android feature and is not considered a modification of the device.
Can I install an APK on a Chromebook?
Yes, if your Chromebook supports Android apps. You enable “Install unknown apps” in the Android settings on the Chromebook, then use the Files app to open the APK. The process is the same as on a phone. Not all Chromebooks support Android apps, so check your model’s specifications first.
What happens if I leave the permission on?
Nothing immediate happens, but the app you enabled it for can show you installation prompts at any time. If that app is compromised, it could trick you into installing a malicious APK. Google recommends turning the permission off after you finish installing, as noted in the Google Support documentation for Android.
Why does Android ask for this permission at all?
Android asks for this permission to prevent apps from installing packages without your knowledge. The REQUEST_INSTALL_PACKAGES permission is a security control that ensures only apps you explicitly trust can initiate installations. Without it, any app could install anything on your device.
Free tools for this: Apk.now.
Where this fits
This is one guide from Where to Download Android Apps and APKs Safely.
