Blocking app downloads on Android is the process of preventing new application installations through Google Play Store, third-party sources, or sideloading methods using device security settings, parental controls, or administrator permissions.
Users need this when managing children’s devices, securing work phones, preventing unauthorized purchases, or controlling data usage on shared devices.
This guide covers 4 methods requiring 2-10 minutes each and Android 9.0 or later.
Prerequisites
Required for all methods:
- Android 9.0 (Pie) or later
- Device administrator access or owner account
- 5-10 minutes per method
- Active internet connection for verification
Method-specific requirements:
- Google account credentials (Play Store method)
- Second device with Google Family Link installed (parental controls)
- MDM software license (enterprise method)
Method 1: Google Play Store Settings
Step 1: How Do You Access Play Store Authentication Settings?
Open Google Play Store, tap profile icon (top right), select Settings → Authentication, then tap “Require authentication for purchases” to access password protection options that control all app installations and in-app purchases through your Google account.
Action:
- Play Store app → Profile icon (circle/initial, top right corner)
- Settings → Authentication → “Require authentication for purchases”
- Screen displays authentication options: “For all purchases,” “Every 30 minutes,” “Never”
Purpose: Prevents unauthorized downloads without Google account password verification.
Step 2: Where Do You Enable Purchase Authentication?
Select “For all purchases through Google Play on this device” option, confirm with your account password or biometric authentication, then verify the green checkmark appears next to this setting indicating every download now requires authentication regardless of cost.
Action:
- Tap “For all purchases through Google Play on this device”
- Enter Google account password or use fingerprint/face unlock
- Green checkmark confirms activation; test by attempting free app download
Purpose: Creates password barrier for every Android app installation including free applications.
Step 3: How Do You Set App Installation Restrictions?
Return to Play Store Settings, navigate to Family → Parental controls, toggle switch to “On,” create 4-digit PIN, then select content restrictions for Apps & games setting minimum age rating (3+, 7+, 12+, 16+, 18+) that blocks downloads exceeding chosen threshold.
Action:
- Settings → Family → Parental controls → Toggle “On”
- Create PIN (4 digits, required to change settings later)
- Apps & games → Select age rating (blocks anything above selected rating)
Purpose: Filters app visibility and download permissions based on age-appropriate content ratings.
Method 2: Google Family Link (Parental Controls)
Step 1: How Do You Install Family Link on Parent Device?
Download Google Family Link for parents from Play Store (search “Family Link”), install the 15MB application, open and tap “Get Started,” sign in with your Google account, then follow prompts to set up as parent/guardian account with supervision capabilities.
Action:
- Play Store → Search “Google Family Link for parents” → Install (15MB)
- Open app → “Get Started” → Sign in with parent Google account
- Select “Parent” when prompted for account type; app displays dashboard
Purpose: Establishes parent account with remote management capabilities for child device supervision.
Step 2: Where Do You Configure Child Account Settings?
On child’s device, install “Google Family Link for children & teens,” sign in with child’s Google account (or create new account if under 13), enter parent’s email when prompted, then verify connection using code displayed on parent device to link accounts.
Action:
- Child device → Install “Family Link for children & teens”
- Sign in with child Google account → Enter parent email address
- Parent device displays 6-digit code → Enter code on child device → Accounts linked
Purpose: Creates supervised account structure allowing parental oversight of all device activities.
Step 3: How Do You Block App Downloads on Child Device?
Open Family Link parent app, select child’s name, tap “Controls” → “Google Play,” toggle “Require approval for purchases and downloads” to ON, then set content restrictions by selecting maximum allowed rating (Everyone, Low maturity, Medium maturity, High maturity, Show all apps).
Action:
- Parent app → Child’s profile → Controls → Google Play
- “Require approval for purchases and downloads” → Toggle ON (turns blue)
- Content restrictions → Select maximum age rating; child sees only approved apps
Purpose: Forces child to request permission for every download; parent approves/denies via notification.
Step 4: How Do You Verify Download Restrictions Are Active?
On child device, open Play Store and attempt to download any application; system displays “Ask your parent” message instead of Install button, sends approval request to parent device as notification, confirming restriction layer functions correctly across the supervised account network.
Action:
- Child device → Play Store → Search any app → Tap item
- Screen shows “Ask your parent” button instead of “Install”
- Parent device receives notification “wants to download [app name]” with Approve/Deny options
Purpose: Confirms parental control enforcement; prevents unauthorized installations through approval workflow.
Method 3: Device Administrator Settings
Step 1: How Do You Access Security and Privacy Settings?
Open Settings app, scroll to Security (or Security & privacy on some Android versions), tap to expand security options, then locate “Install unknown apps” or “Unknown sources” section which controls installation permissions for applications outside Google Play Store ecosystem.
Action:
- Settings app (gear icon) → Security or Security & privacy
- Scroll to “Install unknown apps” (Android 8.0+) or “Unknown sources” (older versions)
- List displays all apps with installation permission capability
Purpose: Accesses system-level controls preventing sideloading from browsers, file managers, and third-party sources.
Step 2: Where Do You Enable Unknown Sources Restriction?
Tap “Install unknown apps,” review list of applications currently permitted to install APK files, select each app individually (Chrome, Files, Downloads), then toggle “Allow from this source” to OFF position disabling installation capability from every listed source.
Action:
- “Install unknown apps” → Shows apps like Chrome, Files, Gmail, Downloads
- Tap each app → “Allow from this source” toggle → Switch to OFF (gray)
- Repeat for all listed applications; empty list means no sideloading possible
Purpose: Blocks APK installations from file managers, browsers, email attachments, and messaging apps.
Step 3: How Do You Disable App Installation from Browser?
Open Chrome browser (or default browser), tap three-dot menu → Settings → Site settings → Additional permissions, locate “Install unknown apps” permission, tap Chrome entry, then confirm toggle switched to “Don’t allow” preventing browser-initiated downloads of Android application packages.
Action:
- Chrome → Three dots (⋮) → Settings → Site settings → Additional permissions
- “Install unknown apps” → Chrome → “Don’t allow” option
- Browser now blocks APK downloads; shows “Installation blocked” when attempted
Purpose: Eliminates browser as installation vector for applications downloaded from websites outside official app stores.
Method 4: Third-Party MDM Apps (for Work Devices)
Step 1: Which MDM App Should You Install?
Download enterprise mobile device management solution like Microsoft Intune (free trial, requires Microsoft 365), VMware Workspace ONE (14-day trial), or MobileIron (contact sales for pricing) from Play Store, matching your organization’s existing infrastructure and licensing model for unified management.
Action:
- Play Store → Search “Microsoft Intune Company Portal” or “VMware Workspace ONE”
- Install app (20-50MB depending on solution) → Open → Sign in with organization credentials
- Grant administrator permissions when prompted; app displays enrollment status
Purpose: Establishes enterprise-grade control for managing app installation policies across multiple work devices.
Step 2: How Do You Configure App Installation Policies?
Access MDM admin portal via web browser, navigate to Device Configuration → App Management → Application Control, create new policy named “Block App Downloads,” set action to “Prevent installation,” add target devices or groups, then configure whitelist for approved business applications only.
Action:
- Admin portal → Device Configuration → App Management → Create policy
- Policy settings: “Prevent app installation” → Exceptions: List approved apps
- Assign to device groups → Save policy (takes 5-15 minutes to sync)
Purpose: Creates centralized ruleset blocking unauthorized downloads while permitting business-critical applications.
Step 3: How Do You Enforce Download Restrictions Across Devices?
Return to enrolled device, open MDM app, tap “Check for policies” or wait for automatic 30-minute sync interval, verify “App installation restricted” notification appears in status bar, then test by attempting Play Store download which displays “Installation blocked by administrator” error message.
Action:
- Device → MDM app → Sync now or wait for automatic policy push
- Notification shows “New security policy applied” with restriction details
- Play Store shows “Install” button grayed out for non-approved apps
Purpose: Activates policy enforcement preventing installations outside administrator-approved application catalog.
Verification
How to Confirm Download Blocking Works
Test each method:
Play Store method: Attempt free app download → Password prompt appears → Cancel shows “Authentication required.”
Family Link: Child device requests app → Parent receives notification within 10 seconds → Deny blocks installation immediately.
Unknown sources: Download APK from browser → Tap file → “Installation blocked” error appears → No install option available.
MDM solution: Search restricted app → Install button disabled with “Blocked by administrator” message beneath app name.
Check restriction logs:
- Family Link: Parent app → Activity → “App requests” shows denied attempts
- MDM: Admin portal → Reports → Compliance shows blocked installation events with timestamps
- Play Store: Google account → Purchase history shows authentication-required transactions
Troubleshooting
Issue: Restrictions Bypass Through Alternative App Stores
Problem: Child installs Amazon Appstore, APKPure, or F-Droid to circumvent Play Store restrictions.
Solution:
- Settings → Apps → See all apps → Search “APKPure” or “Amazon Appstore”
- Tap app → Uninstall → Confirm removal
- Settings → Security → Install unknown apps → Disable for all sources
- Family Link: Controls → Google Play → Filter apps → Hide all non-Google stores
Verify: Search Play Store for alternative app stores; they should be hidden or show “Ask your parent” button.
Issue: Family Link Not Syncing Restrictions
Problem: Changes in parent app don’t appear on child device; restrictions remain inactive after 10+ minutes.
Solution:
- Check internet connection on both devices (WiFi or mobile data active)
- Child device → Settings → Accounts → Google → Select child account → Tap three dots → Remove account
- Re-add account → Settings → Accounts → Add account → Google → Sign in with child credentials
- Open Family Link on child device → Let sync complete (blue circle animation finishes)
- Parent app → Child’s name → Three dots → Refresh to force sync
Verify: Parent app shows “Last active” timestamp updates to current time within 2 minutes.
Issue: Admin Permissions Reset After Update
Problem: Android system update removes unknown sources restrictions; settings revert to default allow state.
Solution:
- After any system update, immediately check Settings → Security → Install unknown apps
- Disable permission for Chrome, Files, Downloads, and all listed apps again
- Document current security settings before updates: Screenshots of restriction configurations
- Set calendar reminder to review permissions monthly
Verify: All apps in “Install unknown apps” list show OFF status; attempt APK installation fails.
Issue: Child Finds Workarounds (Factory Reset, Safe Mode)
Problem: Tech-savvy child boots into safe mode (disables parental controls temporarily) or performs factory reset erasing supervision.
Solution:
- Enable factory reset protection: Child device → Settings → Security → Screen lock → Set PIN/password
- Prevents reset without Google account password entered after wipe
- For safe mode: Use MDM solution instead of Family Link (MDM enforces restrictions in safe mode)
- Monitor device: Parent app → Activity → Check daily login times for unusual patterns
- Physical security: Keep device charging in common area overnight, not child’s bedroom
Verify: Attempt factory reset; device requires Google account credentials before completing setup.
Comparison: Which Method to Choose
Google Play Store Settings
Time required: 3 minutes
Complexity: Low (5 taps, no additional apps)
Best for: Single adult user wanting purchase protection, preventing accidental downloads, basic self-control measures.
Limitation: Doesn’t block sideloading from browsers or file managers; only protects Play Store downloads; easily disabled by anyone knowing Google password.
Google Family Link
Time required: 8 minutes (parent + child device setup)
Complexity: Medium (requires two devices, account linking, app installation on both phones)
Best for: Parents managing children under 13 (or regional age limit), remote approval workflow, screen time management alongside download restrictions.
Limitation: Requires child account creation; child must be under country-specific age (13 in US, 16 in EU); removable via safe mode on older devices.
Device Administrator
Time required: 5 minutes
Complexity: Medium (system settings navigation, per-app permission management)
Best for: Blocking third-party app stores, preventing malware and spyware installation from unknown sources, supplementing other methods.
Limitation: Doesn’t prevent Play Store downloads; only blocks APK sideloading; settings reset after major Android updates.
MDM Apps
Time required: 15-30 minutes (initial setup), 5 minutes per device after infrastructure established
Complexity: High (admin portal access, policy creation, device enrollment, licensing costs $3-$8/device/month)
Best for: Corporate device fleets, organizations with 10+ managed phones, IT departments needing centralized control, compliance requirements.
Limitation: Requires ongoing subscription costs; technical knowledge for policy configuration; may conflict with personal device usage preferences.
Choose Play Store Settings when: You’re the only device user, want simple password protection, don’t need to block sideloading.
Choose Family Link when: Managing child’s personal device, need approval workflow, want comprehensive parental controls beyond just app blocking.
Choose Device Administrator when: Security is priority over convenience, concerned about malware from unknown sources, supplementing Play Store restrictions.
Choose MDM when: Managing company-owned devices, need audit trails for compliance, require remote policy updates across multiple phones simultaneously.
Next Steps
After blocking app downloads, monitor device usage patterns and adjust restrictions as needed.
Related processes for complete device management:
- Lock individual apps with passwords to prevent unauthorized access to installed applications
- Check screen time statistics to understand usage patterns and set appropriate limits
- Hide sensitive apps from home screen and app drawer while keeping them installed
- Block specific apps from launching during designated times or locations
- Remove pre-installed apps that can’t be uninstalled through normal methods
- Prevent app deletion to stop children from removing parental control or educational apps
Regular maintenance schedule:
Weekly: Review Family Link activity reports for unusual download requests or bypass attempts.
Monthly: Verify all restriction settings remain active after Android security updates; check unknown sources permissions haven’t reset.
Quarterly: Update MDM policies to reflect new business applications; adjust age rating restrictions as children mature.
Security monitoring: Enable Google Play Protect (Settings → Security → Google Play Protect → Turn on) to scan for harmful apps even when download blocking is active, providing additional protection layer against sideloaded malware.
FAQ on How To Block Downloading Apps On Android
Can I block app downloads without using Family Link?
Yes, three alternatives exist: Google Play Store authentication settings (Settings → Authentication → Require authentication for purchases), Device Administrator controls blocking unknown sources (Settings → Security → Install unknown apps), or enterprise MDM solutions like Microsoft Intune for workplace devices requiring no Family Link account.
How do I stop someone from downloading apps on my phone?
Enable Play Store purchase authentication requiring your password for every download (Play Store → Profile → Settings → Authentication → “For all purchases”). Disable unknown sources permissions preventing APK installations (Settings → Security → Install unknown apps → Turn off for all listed applications including Chrome and Files).
Does blocking Play Store downloads also block APK installations?
No, these are separate security layers. Play Store authentication only controls Google Play downloads. APK sideloading requires disabling “Install unknown apps” permissions separately through Settings → Security → Install unknown apps, turning off each app individually that might install packages from external sources.
Can children bypass parental controls on Android?
Children can bypass basic restrictions through factory reset, safe mode workarounds, or alternative app stores. Enable factory reset protection (set screen lock PIN), use MDM solutions instead of Family Link for safe mode enforcement, and disable unknown sources to block third-party store installations like APKPure or Amazon Appstore.
What happens when download blocking is enabled?
Play Store displays “Authentication required” prompts for all apps including free ones. Family Link shows “Ask your parent” buttons replacing Install options. Unknown sources disabled shows “Installation blocked” errors when attempting APK files. Existing apps continue functioning normally; only new installations are prevented.
How do I allow specific apps while blocking others?
Family Link whitelist: Parent app → Controls → Google Play → Manage apps → Select specific apps → Approve individually. MDM solutions create application catalogs listing permitted business apps. Play Store parental controls filter by age rating allowing broader categories. No native Android feature permits individual app whitelisting without these tools.
Can I block app updates but allow current apps to function?
Play Store → Profile → Settings → Network preferences → Auto-update apps → Select “Don’t auto-update apps” to prevent automatic updates. Apps continue working with current installed versions. Security risk: Missing critical patches and bug fixes. Family Link doesn’t separate update permissions from installation permissions; both remain linked together.
Do MDM apps work on personal Android devices?
Yes, but personal device enrollment (BYOD programs) typically requires admin consent granting organization control over security policies, app installations, and sometimes data access. Work profile feature (Android 5.0+) separates personal and business apps, applying MDM restrictions only to work profile containers while leaving personal apps unrestricted.
Will factory reset remove download restrictions?
Yes, factory reset removes Family Link supervision, Play Store authentication settings, and unknown sources restrictions, returning device to default state. Factory reset protection (Settings → Security → Screen lock) requires Google account password after wipe, preventing children from resetting without parent credentials, maintaining some control despite reset attempts.
How do I unblock app downloads after setting restrictions?
Play Store method: Settings → Authentication → Change to “Every 30 minutes” or “Never.” Family Link: Parent app → Child profile → Controls → Google Play → Toggle off “Require approval.” Unknown sources: Settings → Security → Install unknown apps → Enable for specific apps. MDM: Admin portal → Remove device from restricted policy group.
Conclusion
Learning how to block downloading apps on Android protects devices from unauthorized installations, excessive data usage, and unwanted purchases.
The four methods covered-Play Store authentication, Google Family Link, unknown sources restrictions, and MDM solutions-address different security needs and user scenarios.
Simple password protection works for personal devices. Comprehensive parental supervision requires Family Link with remote approval workflows.
Enterprise environments benefit from mobile device management platforms offering centralized policy enforcement across device fleets.
Combining multiple approaches creates stronger defense layers against APK sideloading and third-party app store installations.
Regular verification ensures restriction settings remain active after system updates.
Device administrator controls complement Play Store restrictions by blocking installation permissions for browsers, file managers, and messaging apps attempting to install application packages from external sources.
Many of his resources are available on various design marketplaces and for free on Codepen.
Over the years, he's worked with a range of clients and contributed to design publications like Design Your Way, Designmodo, WebDesignerDepot, WPDean, Speckyboy, and Slider Revolution among others.
