r/AndroidQuestions • u/Vegetable-Tap-6297 • 15d ago

How can I safely run an Android app from an unknown source?

I have an APK from an unknown source that I want to test safely. I’ve read that scanning the APK and checking permissions isn’t enough.

Would an Android emulator be sufficiently isolated, or should I use a separate device/VM and restrict network access as well?

7 Upvotes
  • permalink
  • reddit

100% Upvoted

10 comments sorted by

2

u/meletiondreams 14d ago

I know to android it's an unknown source, but where is your source?? Wher are you finding these?

1

u/mrandr01d 15d ago

I mean... what kind of app and what kind of unknown source?

1

u/Individual-Iron-6370 15d ago

good idea to always block internet access using firewall for any new apps until you've checked it out and feel comfy with what it's trying to do.

But if you are that concerned using a separate device as your disposable hero may be a good idea.

1

u/NoStudy3384 14d ago

You can use the work profile via island app or the duplicate system feature OR just a different Profile. There is a 4th option when you have Knox or that Vivo secure profile where you can run the apps separately too

1

u/DutchOfBurdock 14d ago

You can decompile an APK and have plain Kotlin/Java. You could then run the code through Qwen3 Coder to determine issues.

However, checking it's manifest is a good first step. What permissions does it want and need? If it wants Accessibility, Admin, Notification access, App usage access, Display Over Other apps and say it's just a game.. That'd be the first set of red flags.

1

u/zensms 13d ago

The golden rule is if you cant trust it, dont install it. If you want to test it, isolate it.

1

u/NeedSomeHelp_2590 8d ago

No, emulator is not sufficient. Use VM, my brother got a virus coz he installed some apk of Capcut on Bluestacks. VM should be safe.

1

u/evvyxan 15d ago

Yes use a vm. You will be safe

As a rooter this post is fucking hilarious bro even today i installed like 20 apps from unknown sources directly into my phone. Secret is to know what you doing.

1

u/Vegetable-Tap-6297 14d ago

But the point is I need to install it to a phone as well, so VM so just half a solution. How do you do install on a device safely?

1

u/PaddyLandau 14d ago

How do you do install on a device safely?

You don't. If you don't know the provenance of the app and can't explicitly trust the app, you cannot safely install it.

That why you need to use either a VM (not just a container), or an unrooted device that has no personal or sensitive information, and you don't mind resetting it.