How to Install an APK on Android Safely: Step-by-Step Guide

An APK is the package file Android uses to install an app. Most people get apps from Google Play, but there are ordinary reasons to install an APK yourself: a developer shares a beta build, an app is not offered in your country, or you need an older version that still runs on your phone. The file type is not the risk. The risk is where the file comes from and whether it is really the one you meant to install.

This guide walks through the whole process on a current Android phone, explains what each prompt means and shows how to close the door again afterwards. Menu names differ a little between Pixel, Samsung, Xiaomi and other brands, so the guide describes what to look for as well as where it usually is.

Before you start: three quick checks

1. Know the source. Prefer the developer’s own website, or a listing that links to the official Google Play page. If you are not sure the file is trustworthy, read how to check whether an APK is safe first.
2. Match the version and size. The listing should tell you the version number and file size. If the file you receive is far smaller or larger, stop and find out why.
3. Check that your phone is supported. Every app has a minimum Android version. Our guide to the Requires Android line shows how to read it and how to check your phone.

Step 1: Allow installs from one app, not from everywhere

Since Android 8.0, the permission to install unknown apps is granted per app instead of for the whole phone. You give it to the app you are using to open the file, such as your browser or a file manager.

Android usually asks at the right moment. When you tap an APK for the first time, a message says your phone is not allowed to install unknown apps from this source and offers a Settings button. Tap it and switch on the option to allow installs from this source. If you prefer to find the setting yourself, look under Settings, Apps, Special app access, Install unknown apps (on some phones it sits under Security or Privacy). Choose your browser or file manager and turn it on.

On Android 7.1 and older there is a single switch called Unknown sources under Security. Phones that old no longer receive security updates, so be extra careful about what you install on them.

Step 2: Download the file and look at it

Download the APK from the source you chose. Before opening it, check three things in your Downloads folder:

• The name ends in .apk. Files ending in .exe, .zip or .apk.zip are not what you want.
• The size roughly matches the listing.
• The file name matches the app. A file called update.apk for a game is a warning sign.

If the file ends in .xapk, .apkm or .apks it is a bundle that needs a different installer. Our guide to APK, AAB and XAPK files explains what to do.

Step 3: Open the file and install

Tap the file. Android shows the app name and an Install button. Read the name carefully, because lookalike apps often differ by one word. If Google Play Protect offers to scan the app, let it. The scan only takes a few seconds and adds a useful second opinion.

When the install finishes, choose Open to try the app or Done to leave it. Notice which permissions the app requests when it first runs. A flashlight app that wants your contacts or messages is a reason to uninstall it immediately.

Step 4: Switch the permission off again

Go back to the Install unknown apps setting and turn off the permission for the browser or file manager you used. This takes ten seconds and means that a later download cannot install itself with a single tap. Treat it like locking the door after a delivery.

Installing from a computer with USB

If you develop apps or manage several devices, you can install over USB with Android Debug Bridge. Turn on Developer options and USB debugging on the phone, connect it and run adb install app.apk on the computer. To replace an existing copy while keeping its data, add the -r flag. This route needs no unknown-sources permission, but the same rules about trusting the file apply.

Why sideloaded apps may not update by themselves

Apps installed from Google Play update through Play. An APK you install by hand does not always do that. If the file was signed with the same key as the Play version, Play can usually take over updates. If not, you will have to download each new version yourself. Check the listing now and then for a newer version number, and install the new APK over the old one.

Newer Android releases also refuse very old apps, specifically those built for Android 6.0 or earlier. That can look like a failed install even though the file is fine.

If the install fails

The message App not installed has several different causes, from low storage to a signature mismatch. Work through the checklist in App not installed error: causes and fixes. If storage is the problem, freeing up space on your phone usually solves it.

Frequently asked questions

Is it legal to install an APK?

Yes. Installing an APK is a normal Android feature. What is not legal is installing pirated or cracked copies of paid apps, which also tend to carry malware.

Will an APK work on every phone?

No. It must support your Android version and your phone’s processor type. Some apps ship different files for different devices.

Do I need to uninstall the Play Store version first?

Only if the two copies were signed with different keys. In that case Android refuses to install over the top and you must uninstall first, which removes local app data unless it is backed up.