If you’ve tried to install an app from outside the Play Store, you’ve met the gatekeeper: Android’s unknown-sources protection. Knowing how to allow unknown sources Android-style in 2026 means understanding the modern per-app permission system — it’s safer and more precise than the old global switch. This guide shows the exact menu paths for Samsung, Pixel, Xiaomi, and OnePlus, and explains when to turn the permission back off.
How It Worked Before: The Old Global Switch
On Android 7 (Nougat) and older, there was a single toggle: Settings > Security > Unknown sources. Flip it on, and any app on your phone could install APKs — your browser, a messaging app, even malware running in the background. It was convenient but risky: one toggle opened the door for everything. If you’re still on an ancient device, that switch is where to look — but almost everyone today uses the newer system below.
Allow Unknown Sources Android: How the Per-App Permission Works
Since Android 8 (Oreo), the permission is granted per app. Only the specific app you authorize — usually your browser or file manager — can trigger APK installs. Everything else stays blocked. This is a major security upgrade: even if a malicious app lands on your phone, it can’t install anything without this permission.
The permission is officially called “Install unknown apps” and lives under Special app access in Settings. You’ll typically encounter it in two ways:
- Automatic prompt: tap an APK file and Android shows a dialog with a Settings button that jumps straight to the permission for that app.
- Manual path: navigate through Settings yourself using the brand-specific paths below.
For the complete installation walkthrough that uses this permission, see how to install APK files on Android.
Allow Unknown Sources Android: Brand-by-Brand Menu Paths
- Samsung (One UI): Settings > Apps > Special app access > Install unknown apps > choose the app (e.g., Chrome) > toggle Allow from this source on.
- Google Pixel: Settings > Apps > Special app access > Install unknown apps > choose the app > toggle on.
- Xiaomi / Redmi / POCO (MIUI / HyperOS): Settings > Privacy protection > Special app access > Install unknown apps > choose the app > allow. (On some MIUI versions: Settings > Passwords & security > Privacy > Special app access.)
- OnePlus (OxygenOS): Settings > Apps > Special app access > Install unknown apps > choose the app > allow.
- OPPO / vivo / realme (ColorOS / FuntouchOS): Settings > Privacy > Special app access > Install unknown apps > choose the app > allow.
- Motorola: Settings > Apps > Special app access > Install unknown apps > choose the app > allow.
Can’t find “Special app access”? Use the search bar at the top of Settings and type “Install unknown apps” — it appears on every modern Android phone.
Should You Turn It Off Afterwards?
Yes — and here’s why. The permission is only needed during the actual install. Leaving it on means that app retains the ability to install APKs silently in the future. Best practice:
- Enable the permission.
- Install your APK.
- Go back to the same menu and toggle it off.
This takes ten seconds and closes a potential attack vector. It’s one of the core habits in our APK safety checklist, alongside reviewing dangerous app permissions before every install. If you’re weighing the broader risks, read is sideloading safe for the full picture.
What About “Install via USB” in Developer Options?
You may have seen a separate toggle called “Install via USB” under Developer options (mostly on Xiaomi phones). It controls whether apps can be installed onto your phone from a computer over ADB — a different channel from the “Install unknown apps” permission, which controls installs initiated on the phone itself. For normal APK sideloading you don’t need “Install via USB” at all. Leave Developer options off unless you’re following a guide that specifically requires ADB, such as our APK extraction walkthrough.
Does This Permission Affect Play Store Installs?
No. Apps installed from the Google Play Store never need this permission — the Play Store is a trusted installer by default and updates its apps silently in the background. The “Install unknown apps” permission only gates installs that start from other apps: browsers, file managers, messaging apps, and APK installer tools. That’s exactly why the per-app model is safer than the old global switch — your everyday Play Store experience is completely untouched.
Frequently Asked Questions
Is allowing unknown sources dangerous?
The permission itself isn’t dangerous — it just authorizes one trusted app to install APKs. The risk comes from what you install afterward. Grant it temporarily, install from trusted sources, then turn it off.
Why can’t I find “Unknown sources” in my settings?
That exact label only exists on Android 7 and older. On Android 8+, look for “Install unknown apps” under Special app access instead.
Do I need to allow it for every APK I install?
Only once per installing app. If Chrome has the permission, you can install ten APKs downloaded through Chrome without touching settings again. A different app (like your file manager) would need its own grant.
Will this void my warranty or break my phone?
No. It’s an official Android setting, not a hack. It doesn’t require root and doesn’t affect your warranty.
Conclusion
Allowing unknown sources on modern Android is a targeted, per-app permission — find “Install unknown apps” under Special app access, enable it for your browser, install your APK, then switch it back off. That three-step rhythm (on, install, off) is the safest way to sideload. Now put it into practice with our step-by-step APK installation guide.