How to Download and Install APK Files Safely on Android

An APK (Android Package) is the installation file for an Android app. When you install from Google Play, an APK is downloaded and installed for you automatically. Some apps are not on Google Play, so their developers offer the APK on their own website. Installing these "sideloaded" apps is possible, but you take on more responsibility for safety.

Before you download

• Use the official source. Download only from the developer's own website, not from a link forwarded in a chat group or a random download portal.
• Check the address bar. Make sure the site uses https:// and that the domain name is spelled correctly. Copycat sites often swap or add a letter or number.
• Keep Play Protect on. Open Google Play → your profile → Play Protect and make sure scanning is enabled. It can still check sideloaded apps.
• Back up your phone and make sure your Android version is up to date.

Installing the APK step by step

1. Download the APK file using your browser.
2. Open the file from your notifications or the Downloads folder.
3. Android will ask you to allow installs from this source (for example "Allow from Chrome"). Allow it only for this installation.
4. Read the permissions on the install screen, then tap Install.
5. After installation, go back to Settings → Apps → Special app access → Install unknown apps and switch the permission off again for your browser.

Red flags during installation

• The file is far smaller or larger than the size stated by the developer.
• The file name ends in .apk.exe, .zip or anything other than .apk or .xapk.
• Play Protect warns that the app is harmful. Do not ignore this warning.
• The app asks for accessibility or device-administrator access without a clear reason.

Keeping the app updated safely

Sideloaded apps do not update through Google Play. When an update is offered, get it from the same official website you used originally. Be wary of update prompts that arrive by SMS or chat messages, which is a common way to spread fake versions.

If something goes wrong

If an app behaves strangely (pop-up ads everywhere, battery drain, unknown payments), uninstall it, run a Play Protect scan, change your important passwords and contact your bank if you entered payment details. In India, report suspected fraud at cybercrime.gov.in or call 1930.