How to Install an APK File on Android

An APK is an Android app in a single file, the same format the Play Store installs behind the scenes. Installing one yourself takes three things: the file, permission for the app you open it with, and a tap on Install. This guide covers the steps on current phones, the warnings you may meet on the way, and what the common error messages mean.

Step by step, on Android 8.0 and later

1. Download the APK. In Chrome, it goes to your default download location; Chrome Help says to find downloads in the Files app, or in Chrome under More (⋮) → Downloads.
2. Open it, from the download message in your browser or by tapping it in your file manager.
3. The first time, Android stops and shows a message titled with the name of the app you opened the file from: “For your security, your phone currently isn’t allowed to install unknown apps from this source. You can change this in Settings.” Tap Settings.
4. Turn on Allow from this source (in Portuguese, Permitir desta fonte) and go back.
5. Android asks “Do you want to install this app?” Tap Install. On Android 17 phones with Google’s standard installer, the question reads “Install this app?”

Since Android 8.0 there is no single “Unknown sources” switch. The permission belongs to the app that opens the APK. Google introduced it in 2017 as “tied to the app that prompts the install”, so allowing Chrome doesn’t allow your file manager, or the other way round. To see or take back the permission later on a Pixel, Google’s path is Settings → Apps → Special app access → Install unknown apps, then the app, then Allow from this source. Other phone makers put it in similar places; if you can’t find it, search Settings for “Install unknown apps”. Google’s own help adds that when you install apps from outside Google Play, “your phone can send Google information about those apps” to protect against harmful apps.

To update an app later, install the newer APK the same way: if it is a newer version signed with the same key, Android installs it over the old one and keeps your data. Our guide to updating apps installed from APKs explains when that works.

On Android 7.1 and older

These versions have one switch for all apps. Android’s developer documentation says users “should enable the Unknown sources system setting, found in Settings > Security on their devices.” Some versions ask instead whether to allow just this one app; Google advises that “users should allow only one unknown app installation at a time if the option is available to them.”

Warnings you may see

• Chrome’s download warning. “This type of file can harm your device. Do you want to keep [file] anyway?” This comes from Chrome, not from Android, and Chrome shows it for APK files unless you tapped the link yourself on a site you had already visited before today.
• Google Play Protect, which is on by default and, in Google’s words, “checks apps when you install them.” For an app it doesn’t know, it may suggest a scan first: “Play Protect hasn’t seen this app before. To protect your device and data, send some info about the app to Google for scanning before you install.” It also warns about apps “built for an older version of Android” (see our guide to that message).
• “App blocked to protect your device.” Play Protect’s enhanced fraud protection blocks some installs from browsers, messaging apps and file managers outright: apps that ask for SMS access, notification access or accessibility, “permissions frequently abused for financial fraud”. Google named Brazil among the first countries in 2024 and 2025 and said in 2026 that it now covers 185 markets. Google describes no way around this block.
• During a phone call. On Android 16, Google’s in-call protections stop you from allowing a new install source while you are on a call with someone not in your contacts, because scammers ask people to do exactly that. Hang up first.
• Advanced Protection. If you turned on Android’s Advanced Protection mode, it blocks installing apps from APK files altogether.

Samsung: Auto Blocker

Galaxy phones have an extra switch. Samsung: “When you enable the Auto Blocker feature, it can help protect your phone by preventing the installation of apps from unauthorized sources”. It was off by default when Samsung introduced it in 2023, but “For Galaxy devices released with One UI 6.1.1, the Auto Blocker feature is set to On by default”; phones updated from an older version keep their setting. While it is on, the installer refuses APKs from outside the Galaxy Store and Play Store, and apps installed from APKs don’t update. Samsung’s advice: “If the app is determined to be safe, temporarily disable this feature and try again.” The switch is in Settings → Security and privacy → Auto Blocker (in Portuguese, Segurança e privacidade → Bloqueador automático). Android’s own Install unknown apps permission is a separate setting, so you may need to allow both.

Xiaomi and other phone makers

Xiaomi says its security app includes “application installation monitors” and recommends GetApps or Google Play. Its Security app’s privacy policy also describes limits on installing over USB from a computer: “installation of apps via USB will be automatically turned off if no SIM card is detected, or if the current SIM card has been used in seven or more mobile phones within 6 months.” Other makers’ installers may show their own scan screens and wording; we found no official descriptions of them.

Errors and what they mean

The messages below are from Android’s standard installer, Android 16; Android 17 and phone makers’ installers word them differently, and the meanings come from Android’s developer documentation.

Message	What it usually means
“App not installed as package conflicts with an existing package.”	Another copy of the app, signed by someone else, is already installed. See package conflicts.
“App not installed as app isn’t compatible with your phone.”	The app needs hardware or a newer Android, or has no native code for your phone’s processor. See arm64-v8a vs armeabi-v7a.
“App not installed as package appears to be invalid.”	The file is damaged, incomplete or wrongly signed, or it is older than the version you have.
“There was a problem parsing the package.”	Android couldn’t read the file. Usually the download is incomplete or broken, the file isn’t a plain APK, or the app needs a newer Android version than your phone has.
“The package was blocked from being installed.”	A device policy, Play Protect or another verifier stopped it.
“Out of space”	Free up storage and try again.

If the file ends in .xapk, .apks or .apkm, it isn’t a single APK: see how to install split APKs. If the phone is managed by a school or employer, or has parental controls, the message may say installing is not allowed by the admin or for this user.

After installing: restricted settings

Since Android 13, an app installed from a file can’t get some sensitive permissions straight away, such as accessibility, notification access or SMS. You see “Restricted setting”: “For your security, this setting is currently unavailable.” Google explains how to allow it: open Settings → Apps, tap the app, then ⋮ → Allow restricted settings. It also warns: “We don’t recommend that you allow restricted settings unless you trust the app developer.”

Installing from a computer with adb

1. On the phone, open Settings → About phone and tap Build number seven times, “until you see the message You are now a developer!”
2. In Developer options, turn on USB debugging, connect the phone and accept the computer’s key when asked.
3. On the computer, with Google’s Platform Tools installed, run adb install path_to_apk.

adb prints the exact reason when an install fails, which helps with the errors above. Play Protect can still check apps installed this way, through the Verify apps over USB option, and on Xiaomi phones the USB restrictions above apply.

Does developer verification block APKs?

Not yet for files you download from websites. Google’s new rule, in force since 30 September 2026 in Brazil, Indonesia, Singapore and Thailand, checks apps installed from Google Play and six other app stores. Google’s FAQ: “If you distribute your app through other stores, or if users sideload your app directly, these new verification requirements won’t apply to your app yet.” Google plans to extend it to all apps in 2027. Our developer verification guide has the details.

Before you install

An APK can come from anyone, so where you get it matters. Every APK on this site is the developer’s or the app store’s own file, with its signature checked; our guide to verifying an APK’s signature shows how to check a file yourself, from any source, before you open it.