Modern Android smartphones include a built-in malware scanner called “Google Play Protect.” This service runs constantly in the background, scanning every application you install from the Google Play Store, and routinely checking all the apps currently on your device for malicious behaviour. If it detects a threat, it can automatically disable or silently uninstall the offending application.
While this is an absolutely vital security feature for 99% of users, it is a significant obstacle for Android developers, penetration testers, and hardware hackers. If you are sideloading custom APKs, testing a reverse-engineered application, or running rooting utilities (like Magisk modules or termux scripts), Play Protect will frequently flag these completely legitimate hacking tools as malware and violently rip them off your device without asking. To ensure that you have absolute, unimpeded control over the software running on your smartphone, you must completely disable the Play Protect scanner.
Disabling Play Protect via the Google Play Store
You can turn off the background scanning engine directly from within the Play Store application. Warning: Doing this leaves your phone completely vulnerable to actual malware. Only proceed if you know exactly what you are installing.
- Open the Google Play Store application on your Android smartphone.
- Tap your Profile Picture (or initial) in the top-right corner of the screen.
- From the dropdown menu, tap on Play Protect.
- You will see a status screen showing the last time your apps were scanned. Tap the Gear icon in the extreme top-right corner to open the Play Protect Settings.
- You will see two toggle switches. The top one is labelled Scan apps with Play Protect.
- Tap the toggle switch to turn it Off.
- A severe warning popup will appear, asking you to confirm the action. Tap Turn off.
- You will likely be required to authenticate this change using your fingerprint, PIN, or pattern unlock.
The change takes effect instantly. The Play Protect shield icon will turn red, indicating that your device is no longer being monitored. You are now free to sideload any custom APK, install unsigned binaries, or run penetration testing suites without Google silently deleting your software in the background.