How to Disable App Installation from Unknown Sources on Android

Introduction / Why This Is Needed

The "Unknown sources" setting in Android controls the ability to install apps from outside official stores like Google Play. By default, this setting is disabled to protect against malware distributed as APK files through browsers, messengers, or file managers. Disabling this setting is a key step in securing your device, as it blocks the manual installation of unverified apps that could steal data or disrupt system operations.

After completing this guide, your device will prohibit the installation of any apps except those coming from trusted stores added to the system's whitelist.

Requirements / Preparation

Before you begin, ensure that:

1. You have a device running Android 5.0 (Lollipop) or higher. The interface may differ on older versions.
2. You have access to the device's primary account (not a guest account).
3. There is no active parental control or work profile on the device that could block changes to security settings.

Step-by-Step Instructions

Step 1: Open the 'Settings' App

On the home screen, find the gear icon (Settings) and tap it. You can also swipe down from the top to open the notification shade and tap the gear icon. If you cannot find Settings, use the system search: at the top of the Settings app, there is often a search field—enter "Security".

Step 2: Navigate to the 'Security' or 'Apps' Section

Depending on the manufacturer (Samsung, Xiaomi, Huawei, etc.) and Android version, the setting may be located in different sections. Usually, it is one of the following:

• Security — the most common option.
• Privacy.
• Apps & notifications — then "Special access" or "Advanced app settings".
• Additional settings.

Scroll down the list to find the required section. On some devices (e.g., with Samsung's One UI), the section may be called "Biometrics and security".

Step 3: Find the 'Unknown sources' Toggle

Inside the security section, look for an option named:

• "Unknown sources".
• "Install from unknown sources".
• "Allow installation of apps from unknown sources".

In Android 8.0 (Oreo) and higher, there may be no global toggle. Instead, the system will request permission for each app (browser, file manager) through which you attempt to install an APK file. In this case, you will need to disable the permission for the specific app in its settings (see the "Potential Issues" section).

Step 4: Disable the Toggle

Tap the toggle to switch it to the inactive (gray) state. On some devices (especially Samsung), the system will show a pop-up warning about the risks. Press "Disable" or "OK" to confirm.

After this, manual app installation (via APK files) will be blocked. The system will show an error when attempting to start an installation from a file manager or browser.

Verifying the Result

To ensure the setting has been applied, try manually installing any app:

1. Download an APK file (e.g., from the app's official website) via your browser.
2. Open Files (file manager) and go to the Downloads folder.
3. Tap the APK file. A message should appear: "Installation blocked" or "Enable unknown sources in security settings to install apps".

If the message appears—the setting is working correctly.

Potential Issues

Issue 1: Cannot find the 'Unknown sources' setting

Solution: In Android 8.0+, the setting has moved to the individual app level. To block installation via a specific app (e.g., Chrome browser or a file manager):

1. Open Settings → Apps.
2. Select the app through which you open APK files (e.g., Chrome or Files).
3. Go to "Special access" or "Permissions".
4. Find "Install unknown apps" or "Install apps from unknown sources" and disable it.

Issue 2: The 'Unknown sources' toggle is grayed out and inactive

Causes:

• Parental controls (Digital Wellbeing) or a work profile is active on the device.
• The device is organization-owned (work profile managed by an administrator). Solution: Remove the work profile or disable parental controls in settings. If the device is corporate, contact your IT administrator.

Issue 3: APK files are still installing after disabling

Cause: You disabled the setting for one app (e.g., your browser), but you are trying to install via another (e.g., Telegram). Solution: Repeat Step 3 for all apps that could potentially access APK files (browsers, messengers, file managers).

Issue 4: The setting disappeared after a system update

Cause: The manufacturer (Xiaomi, Huawei) may have moved the setting into their proprietary section. Solution: Use the settings search (at the top of the Settings app) and enter keywords: "sources", "install", "apk". Also check sections like "Password & security" or "Additional settings".