← All posts

GETTING STARTED

Limited Distribution Accounts in the Android Developer Console: What They Can and Cannot Do

Checked against Android Developers and Android Developer Console Help documentation. Google is still revising this program, and some official pages currently disagree with each other, so confirm the figures on your own console screens before you rely on them.

Most writing about Android developer verification assumes you are shipping to the world. That leaves out students, hobbyists, teachers, and anyone building small apps for a handful of people they know. Google created a separate account type for exactly that case — free, no government ID check, and a hard cap on how many devices can install your apps.

This guide walks through that account end to end: what it can and cannot do, what you need before signing up, how to register a package name, and how device authorization works. For identity verification, the Play Console path, and the rollout, the Android developer verification guide covers it in depth.

Quick answer: what a limited distribution account gives you

The short version

  • It is free and lives in the Android Developer Console, not Play Console.
  • No government ID is required. That is the whole point of the account type.
  • Install reach is capped. Google's dedicated help article says up to 50 authorized devices; several other official pages still say 20, so check your own Devices page.
  • Only brand-new package names. A name already seen on Android cannot be registered here.
  • Personal accounts only. Organizations cannot use this plan.
  • You still need a Google Account with 2-Step Verification, a linked payments profile, and a contact email.
  • It is not a route to Play. Publishing there still means Play Console and its own requirements.

What a limited distribution account actually is

Android developer verification links a real-world entity to the apps it ships, which means a package name has to belong to a verified developer. The Android Developer Console exists for developers who distribute apps only outside Google Play, so they can verify their identity and register those package names without a Play account. The installation protections currently apply in a small number of countries, with wider expansion planned.

The limited distribution plan is the lighter version. It skips identity document checks and instead limits distribution to devices that a specific person has knowingly authorized. Google describes the sharing mechanism as a secure handshake: a QR code or link, an explicit confirmation on the device, and registration in the console.

Two things follow from that design. Your apps are not public — reach depends on someone accepting an invitation. And identity verification, the barrier that would otherwise stop abuse, is replaced by social trust: the receiving device is shown your developer name and asked to confirm you are someone the owner knows.

What it is not: a review process, malware scan, or safety verdict. Google's own comparison is an ID check at the airport — identity first, content screening is separate.

Who it is for — and who should not use it

Google publishes the intended use cases directly, and they are narrow:

This describes you You build apps to…
Hobbyist Share with family and friends, or use personally. No commercial intent.
Individual learner Experiment, often for a portfolio, and share prototypes with peers.
Classroom learner Share school projects with classmates and teachers.

If any of those apply, the account fits and costs nothing. If you are shipping commercially, collecting payments, or running an organization, it is the wrong plan — Google is explicit that full distribution is required for a wide audience.

Which developer path fits Publishing on Google Play leads to Play Console. Distributing only outside Google Play leads to the Android Developer Console, with a free limited plan or a paid full distribution plan. Start with where you ship The console choice follows the distribution. Where do your apps go? This single answer decides the account. Google Play Use Play Console. Register external apps there too. Only outside Play Use the Android Developer Console. Limited plan Free, no ID. Capped devices. Full plan Paid, ID required. No Play account is needed for either external route.
Figure 1 — The console follows the distribution channel, not the app. Play publishers never need a second account for apps they ship on Play.

Prerequisites before you sign up

Four things are required, and three are easy to overlook:

  1. A Google Account.
  2. 2-Step Verification turned on for that account. The console will not let you proceed without it.
  3. A linked Google payments profile. This is how the account holds your legal name and address instead of asking for a document.
  4. A contact email address Google can use to reach you. It is not shown publicly.

There is no fee and, in Google's words, no government ID requirement. Note what the payments profile implies, though: you are still supplying a legal name and address, just not proving them with a document. If that profile is stale, fix it first — the same mismatch problems that break identity verification come from old profile data.

Which path fits: three honest options

Full distribution Limited distribution No account, sideload
Best for Organizations and professional developers with wide distribution. Students, hobbyists, and personal use. Developers who choose not to verify.
Identity verification Required. Not required. Not required.
Distribution Any app store or channel you choose. Authorized devices only. Channels that do not require verification.
Cost One-time registration fee. Free. Free.
User experience Unchanged from today. Accept an invitation from a developer they know. Advanced flow with additional safeguards.

The third column matters. Not having an account is a legitimate choice, and Google states sideloading is not going away. What changes is friction: anyone installing from an unverified developer goes through an advanced flow that puts time between the request and the install.

Sign-up decisions you cannot reverse

Two choices are made at creation, and Google states the plan cannot be changed afterwards — if you later need a different one, you create a new account and transfer your package names.

Distribution plan

Limited is free and capped. Full carries a one-time fee and no install limits. Choose limited only if you are genuinely building for a small, known group; the cap is a product boundary, not a soft guideline.

Account type

Limited distribution is available only as a personal account. Organization accounts need a D-U-N-S number and a website, and are built for entities distributing commercially. For a student or hobbyist, personal is both correct and the only option here.

One more boundary: package names cannot be transferred from a Google Play account into a limited distribution account. If an app already lives on Play, this is not the account for it.

Registering a package name

Once the account exists, registration happens on the Packages page of the Android Developer Console. Google documents three stages:

  1. Enter the package name you want to register.
  2. Add your key using the SHA-256 certificate fingerprint from your signing key pair. The status becomes In review.
  3. Prove ownership for an existing name by signing an APK with your private key and uploading it, with a snippet the console provides for the APK's asset folder. On success the status becomes Registered.

Two points of accuracy. The private key never leaves your machine — the proof is a signature, not a copy. Never upload, email, or share a keystore. And disputed names follow the same install-based rules used elsewhere: majority of known installs, then keys with at least 50 installs, then first come, first served. The verification guide works through those thresholds with examples.

Setup order for a limited distribution account Create the account with 2-Step Verification and a payments profile, register a new package name with its certificate fingerprint, prove ownership, then authorize devices that will install the app. Setup runs in a fixed order Each step unlocks the next one. 1. Create the account Google Account, 2-Step Verification, payments profile. 2. Register a new package name Add the SHA-256 fingerprint. Status: In review. 3. Prove ownership Sign an APK with the snippet, upload it. Status: Registered. 4. Authorize the devices QR code or link, then a code from the device.
Figure 2 — A device cannot install a registered package until that device has been authorized.

How device authorization actually works

Authorizing a device is the step people get wrong, because it requires the physical device. Both paths start on the Devices page in the Android Developer Console.

  1. Name the device. A friendly label helps you identify it later; it is not shown publicly.
  2. Generate an authorization code. Scan the console's QR code with the device, or share the generated link. It carries your developer name so the recipient can confirm they recognize you.
  3. Enter the code. The device produces a unique code; paste it into the console and select Add device.
  4. Expect consent. The recipient confirms they personally know and trust you before the code is generated.

Shared links expire in seven days. Removal is real, not cosmetic: a removed device cannot install or receive updates, and re-enabling it means authorizing it again.

Device authorization handshake The developer console issues a QR code or link, the receiving device generates an authorization code after its owner confirms they trust the developer, and the code is entered in the console to authorize the device. Authorization is a two-way handshake The console cannot authorize a device on its own. Console: start Name the device. Issue a QR code or link. Links expire in 7 days. Device: consent Owner confirms they know you. Then a code appears. Console: add device Paste the code, select Add device. Now it installs.
Figure 3 — Two participants are required: the console issues the invitation, the device consents and returns a code.

The device limit: 50, 20, or whatever your console says

Google's dedicated limited-distribution help article states you can have up to 50 authorized devices at any one time, and that you must remove one before adding another at the maximum. The Android developer guide agrees.

Several other official pages — the plan-comparison page, the account-setup page, and the verification FAQ — still say 20 devices. Those do not agree, so treat the number on your own Devices page as authoritative and plan for it being lower rather than higher.

Package name rules you cannot negotiate

Two restrictions are specific to this account type and cause most of the dead ends:

  • Only names never seen before on Android. If you try to register a package name that already exists in the ecosystem, you get an error and cannot register it. Pick a different name.
  • No imports from Google Play. Transferring package names from a Play account into a limited distribution account is explicitly unsupported.

The broader eligibility logic still applies underneath: an existing name is allocated by install evidence, not by who asks first. That means a name you have been using privately on a modified build will not automatically be yours here if someone else's key holds the install majority.

Troubleshooting

What you see What it usually means What to do next
Registration rejected The package name already exists on Android. Choose a new name; this account type cannot claim existing ones.
Status sits at In review Ownership proof is outstanding or processing. Complete the signed-APK step and watch for the confirmation email.
Cannot add another device You are at the cap for your account. Remove a device on the Devices page, then authorize the new one.
Install blocked on a known device It was removed, or the package is not registered. Re-authorize the device and confirm status reads Registered.
Authorization link fails The seven-day window elapsed. Generate a new link and resend it.
Need a Play package here Play names cannot be imported. Keep Play distribution in Play Console; use this account for new, external-only apps.
Signing key lost Ownership can no longer be proven. Publish under a new name; back up the keystore from the start.

Limits that surprise people

The cap is per device, not per app. You can register unlimited apps, but each installs only on devices you authorized. Thirty testers means thirty authorizations.

No ID also means no organization. The absence of documents suits a hobbyist and disqualifies a business. If you later incorporate, this is the wrong plan — and it cannot be switched.

Distribution is not marketing. No store listing, ratings, or discovery. The install story is a link you send to someone who knows you.

Sideloading still exists for everyone else. A friend can install without any account through ADB or the advanced flow. This account changes what installs cleanly, not what is possible.

Setup checklist

  • ☐ Confirmed the app will not be published on Google Play.
  • ☐ Google Account with 2-Step Verification enabled.
  • ☐ Payments profile linked, with a correct legal name and address.
  • ☐ Contact email ready and monitored.
  • ☐ Chosen the limited plan deliberately, knowing it cannot be changed.
  • ☐ Package name confirmed as unused on Android.
  • ☐ SHA-256 fingerprint copied from the signing key, keystore backed up twice.
  • ☐ Devices named and authorized before the first install.
  • ☐ Recipients told to expect an authorization prompt naming you.
  • ☐ Every package confirmed as Registered.

Frequently asked questions

Is a limited distribution account really free?

Yes. No registration fee, and no government ID required. You still need a Google Account with 2-Step Verification and a linked payments profile.

How many devices can install my app?

Google's dedicated help article and the developer guide say up to 50 authorized devices at one time; several other official pages say 20. Treat the number on your own Devices page as the enforced limit.

Can I move an app from Google Play to this account?

No. Transferring package names from a Play account into a limited distribution account is not supported, and this account type can only register names that have never appeared on Android.

Do I have to give the recipient my private key?

Never. Ownership is proven by signing an APK; the key stays with you. Anyone asking for a keystore or its password is not following Google's workflow.

Can I change plans later?

Google states the plan cannot be changed after the account is created; you would create a new account and transfer your package names. Decide the final shape first.

Is this the same as verifying my Play developer account?

No. Play Console identity verification checks who the account holder is and uses documents; this account skips documents and caps install reach instead. For Play identity failures, see the identity verification troubleshooting guide.

Is sideloading being removed for everyone else?

No. Google states sideloading is fundamental to Android and that ADB installs remain available. Unverified developers rely on the advanced flow, which adds friction for whoever installs.

Official sources

Small distribution, honest constraints

The limited distribution account is a narrow tool that does one job well: it lets a student or hobbyist ship real apps to people they know without handing over a passport. The price of that convenience is baked in — a device cap, personal accounts only, no existing package names, and an irreversible plan choice.

Check the plan against what you are actually building before you sign up, keep your keystore safe, and authorize devices deliberately. If the app is meant for the public, the right answer is full distribution or Google Play, and no workaround will make this account behave like either.

Ready for your 12 testers?

Stop reading — start testing. Real people on real devices, 14 days, zero chasing.

WhatsApp