Google Expands Binary Transparency to All Android Apps
Verify Android app binaries against the new public ledger to detect tampering.
Verify your Android app binaries against the new public ledger to ensure they match the intended distribution.
Summary
Google has announced an expansion of its Binary Transparency program to cover all Android applications, not just those on Pixel devices. The new public ledger will record every signed binary that Google distributes, providing a tamper‑evident record of app contents. This initiative builds on the Pixel Binary Transparency feature introduced in October 2021, which originally limited the ledger to Pixel‑specific builds. By making the ledger public, Google aims to give developers and users a way to verify that the binaries they install are exactly what the vendor intended.
The ledger is accessible via an API, allowing automated checks against expected cryptographic hashes. Security teams can now detect supply‑chain tampering before an app reaches end users. The program also offers cryptographic proof of authenticity, helping to mitigate attacks that inject malicious code into legitimate app packages. Developers are encouraged to submit their binaries to the ledger to participate in this broader verification ecosystem.
Key changes
- Binary Transparency now applies to all Android apps, not just Pixel builds
- A public ledger records every signed binary distributed by Google
- The ledger is accessible via an API for automated verification
- Developers can submit binaries to the ledger to participate
- The program provides cryptographic proof of app authenticity
- The initiative aims to mitigate supply‑chain attacks on Android