188JILI Unknown Sources: Where the Android Switch Sits
On a current Android phone the unknown sources setting is per app: Settings, Apps, Special app access, Install unknown apps.
| Fact | Value |
|---|---|
| 188JILI Antivirus Android | Android ships with Google Play Protect, which scans apps before download and checks the phone afterwards. |
| 188JILI Biometrics | Biometrics let your fingerprint or face approve a sign-in on your phone. |
| 188JILI Google Play Protect | Google Play Protect is Android's built-in safety check. |
| 188JILI Saved Passwords | Saved passwords live in Google Password Manager on Android and Chrome, and in the Passwords app and iCloud Keychain on iPhone. |
| 188JILI Sideloading | Sideloading means putting an app on a phone from somewhere other than Google Play or the App Store. |
| 188JILI TestFlight | TestFlight is Apple's beta-testing tool: developers upload a test build, invite testers by email or public link, and each build expires after 90 days. |
| 188JILI Untrusted Enterprise Developer | The Untrusted Enterprise Developer message means an iPhone found an app from an organisation's private program that you never set to trusted. |
Android calls the permission behind this page “Install unknown apps,” and most people still search for it as unknown sources. The setting decides which app on your phone is allowed to hand a file to the installer. It is one of the first things on the mobile security settings checklist to read, and it takes under a minute.
Where the unknown sources setting sits
The steps below are quoted from Google’s help page for Pixel phones and Android devices. Other makers may use different menu names, so check with your phone’s manufacturer if a step is missing.
- Open your phone’s Settings app.
- Tap Apps, then Special app access.
- Tap Install unknown apps.
- Pick an app from the list and read the Allow from this source switch.
The setting is a list of apps, not one global tick box. Each entry, such as your browser or a file manager, carries its own switch.
Why it should stay off for your browser
Google’s page puts the risk in two lines: if you download apps from unknown sources, your phone and personal information can be at risk, and it could get damaged or lose data. A browser is the app most likely to meet a link from a chat or an advert, so its switch is the one that matters most.
| App in the list | Switch position to aim for | Why |
|---|---|---|
| Browser (Chrome or another) | Off | Links and pop-ups arrive here |
| Messaging and chat apps | Off | Files forwarded by contacts arrive here |
| File manager | Off unless you chose to use it | It can open any file on the phone |
If you install apps from outside Google Play, the phone can send Google information about them: log information, URLs related to the app, device ID, Android version and IP address, per Google’s page. Google Play Protect then watches the device, which the Google Play Protect page covers.
How the prompt tries to flip it for you
When a file from another source starts to install, Google’s page says the phone may show a message with a Settings button, and on it you are asked to turn on Allow from this source. That prompt is the moment to stop.
A prompt appears after you open a link and asks you to allow installs from this source.
Back out of the prompt without tapping Allow. Open Settings, then Apps, then Special app access, then Install unknown apps, and confirm the app that opened the link shows Allow from this source as off.
Turning it back off
If you switched it on earlier, Google’s steps to undo it are the same path in reverse.
- Open Settings, then Apps, then Special app access, then Install unknown apps.
- Tap the app you want to stop asking you to install unknown apps.
- Turn off Allow from this source.
An iPhone has no switch with this name. Apple’s equivalent decision shows up as a trust prompt, explained on the untrusted enterprise developer page, and the beta route has its own page on TestFlight beta builds. Once the install path is closed, the next layer is the lock on the phone, covered under fingerprint and face biometrics.
FAQ
Where is the unknown sources setting on Android?
Per Google's help page: open Settings, tap Apps, then Special app access, then Install unknown apps, and pick the app. Some phone makers rename these menus, so check with your phone's maker if the path differs.
Why does the switch belong to each app instead of the whole phone?
On current Android the permission is given to one app at a time, such as a browser or file manager. Turning it on for your browser lets that browser hand files to the installer.
How do I undo it if I turned it on?
Go back to Install unknown apps, tap the app and turn Allow from this source off.
Do I need this switch to play in a browser?
No. A mobile browser page needs no installer permission at all.
Related guides
| Guide | What it covers |
|---|---|
| 188JILI Antivirus Android | antivirus android |
| 188JILI Biometrics | biometrics |
| 188JILI Google Play Protect | google play protect |
| 188JILI Saved Passwords | saved passwords |
| 188JILI Sideloading | sideloading |
| 188JILI TestFlight | testflight |
| 188JILI Untrusted Enterprise Developer | untrusted enterprise developer |