iOS Sideloading vs Android APK Installation: Key Differences
Android has always let you install apps from outside its store: you allow an app to install unknown apps and open an APK file. iOS was built the other way round, with the App Store as the only normal route, so installing anything else needs a tool such as Scarlet. This guide compares the two side by side: how installing works, how long apps keep working, what the security trade-offs are, and how the rules changed in 2026.
Looking for Scarlet on Android? It does not exist; see can you use Scarlet iOS on Android.
At a Glance
| Android (APK) | iPhone (IPA with Scarlet) | |
|---|---|---|
| Built into the system | Yes, after allowing an app to install unknown apps | No, needs a tool such as Scarlet |
| Computer needed | No | No for Scarlet’s direct install |
| Signing | Developer signs the APK | App is re-signed with a certificate iOS trusts |
| Can stop working | Rarely; Play Protect can warn about or disable harmful apps | Yes, when the certificate is revoked |
| Sandboxing | Yes | Yes |
| 2026 changes | Developer verification starting in some countries | Alternative marketplaces in the EU, Japan and Brazil; no change elsewhere |
The Basic Difference
Android treats installing from outside Google Play as a normal, if guarded, feature. The APK format is documented, and installation is built into the system. You only have to give the browser or file manager permission to install unknown apps.
iOS only runs apps signed with a certificate that chains back to Apple. There is no setting to install an app that is not signed that way. Every sideloading method on iOS, Scarlet included, works within this signing requirement: Scarlet signs apps with an enterprise-style certificate that iOS accepts once you trust the developer.
Installing: Side by Side
Android APK
- Download the APK in your browser, ideally from the developer’s own site.
- Open the file. The first time, Android asks you to allow the browser or file manager to install unknown apps; on older Android versions this was a single “Unknown sources” setting.
- Tap Install.
iPhone with Scarlet
- Install Scarlet once; see how to install Scarlet iOS, or open our Scarlet iOS install page in Safari.
- Open Scarlet and find the app, or import an IPA file you have.
- Tap Install and confirm the prompt.
- Trust the developer in Settings, General, VPN and Device Management if iOS asks.
After the first setup, installing on iPhone is nearly as quick. The trust step and the one-time Scarlet install are the extra friction. Full details are in how to sideload IPA files with Scarlet.
How Long Apps Keep Working
This is the biggest practical difference.
- Android: an installed APK keeps working until you remove it. The exception is Google Play Protect, which can warn about or turn off apps it judges harmful.
- iPhone with Scarlet: apps keep working as long as the certificate they were signed with is valid. Apple revokes enterprise certificates it finds being used to distribute apps to the public, and then the apps stop opening until they are reinstalled. See what to do when the certificate is revoked.
- iPhone with your own Apple ID (Sideloadly, AltStore, SideStore): a free Apple ID signs apps for 7 days, after which they must be refreshed; a paid developer account signs them for a year.
- TrollStore: installs apps permanently, but only on iOS 14.0 to 16.6.1 and iOS 17.0.
Security Compared
Android
Because anyone can publish an APK, malicious copies of popular apps spread more easily outside Google Play, and Android malware often relies on tricking users into installing an APK and granting powerful permissions such as accessibility access. Play Protect scans apps, including those installed from outside the store, but it does not catch everything.
iPhone
Sideloaded iOS apps run in the same sandbox as App Store apps and still have to ask for permissions such as photos, contacts and location. That limits what a bad app can reach, but it does not protect the data you type into it, such as a login. Apps installed with Scarlet are not reviewed by Apple, so the source is your main protection. Our sideloading security guide covers this in detail.
On both systems the rule is the same: prefer the original developer, avoid modified copies of popular apps, and check files from unknown sources. See how to scan IPA files for malware.
App Formats
An APK runs on Android devices from different makers, as long as it supports the device’s Android version and processor type. An IPA runs only on iPhone and iPad, and many list a minimum iOS version. Neither format runs on the other system.
What Changed in 2026
Android: developer verification
From September 2026, certified Android devices in Brazil, Indonesia, Singapore and Thailand require apps to come from verified developers, including apps installed from outside Google Play. Google has said experienced users can still install apps from unverified developers through an advanced flow with extra steps. Google plans to roll the requirement out worldwide from 2027.
iPhone: EU alternative marketplaces
Since iOS 17.4, users in the European Union can install apps from Apple-approved alternative marketplaces, and since iOS 17.5 from some developers’ websites. Japan and Brazil now allow alternative marketplaces too. These apps are still checked by Apple through notarization. Outside those regions, nothing changed, and tools such as Scarlet remain the main route. See EU sideloading changes.
For Developers
On Android, a developer can publish an APK on their own website, although the verification rules above now ask them to register in the affected countries. On iOS, apps reach users through the App Store, through Apple’s enterprise program (meant only for a company’s own employees), through ad hoc or TestFlight testing, or in the EU, Japan and Brazil through alternative marketplaces. Everything else depends on users sideloading the app themselves.
The Bottom Line
Android is still easier: installing outside the store is built in and apps do not expire. iPhone sideloading with Scarlet closes much of the gap for everyday use, with installs on the device and no computer, but certificate revocations mean it will always need a little more upkeep. Whichever phone you use, where an app comes from matters more than how you install it.
Frequently Asked Questions
Can I install an APK on an iPhone?
No. iPhones only run iOS apps (IPA files).
Is sideloading safer on iPhone or Android?
Sideloaded apps on iPhone are more limited by the system, but on both platforms the biggest risk is an untrustworthy source.
Do sideloaded iPhone apps expire?
Apps signed with an Apple ID expire after 7 days on a free account. Apps installed with Scarlet keep working until their certificate is revoked.