Android Auto sideloading can unlock unsupported apps, but risks remain
Android Auto users can sideload apps such as YouTube and screen mirroring without rooting a phone, but Engadget warns the process brings malware and safety risks.
Google restricts what can run on Android Auto to limit driver distraction, so the official platform does not include video streaming, a browser or screen mirroring. Sideloading lets users install third-party Android Auto apps that bypass those restrictions, Engadget said.
According to the report, users must first enable Developer Mode on their phone by tapping Build number seven times under Settings > About. They then need to turn on Android Auto Developer Mode by tapping Version and permission information about 10 times under Settings > Connected Devices > Android Auto, opening the three-dot menu, choosing Developer settings and checking Unknown sources. After that, they can use an app downloader such as Android Auto Apps Downloader from its developer's GitHub. Engadget also pointed to open-source repositories for CarStream, which enables YouTube playback; AAMirror, which mirrors a phone screen to the dashboard; and Fermata Auto, a media app that handles video, IPTV and a web browser.
The safety risks are significant, the report said. Google has not allowed YouTube videos on Android Auto because watching video while driving is illegal in most parts of the world; only YouTube audio is available. Video features should be used only when the vehicle is parked.
Sideloading also bypasses Google's security screening. Engadget cited Google's finding that internet-sideloaded sources carry more than 50 times more malware than apps listed on Google Play. Google will begin blocking sideloading of unverified Android apps and will ask developers to verify their identity with the company, Engadget said. Those requirements are scheduled to start in late 2026 in a few countries before expanding globally.
For most drivers, the standard Android Auto experience is enough, Engadget wrote. Sideloading is a useful capability but is best treated as a curiosity rather than a daily-use setup. Anyone who proceeds should download only from trusted developers and use video features only when parked.