Google Is Adding OS Authenticity Verification to Android 17 — Here's How It Works

Android 17 is getting a native tool to verify the authenticity of the operating system itself. First announced in May, the feature is designed to give users confidence that their installed version of Android is genuine and free from malicious modifications.

The feature is called Android OS Verification and will initially be available exclusively on Pixel devices, with broader rollout to other hardware expected over time.

The tool targets a specific threat: the distribution of modified Android builds and outright malicious clones. With it, users can confirm that the software running on their device hasn’t been tampered with.

The feature isn’t publicly available yet, but Android Authority got early access and described the experience in detail. The verification process has two stages — one handled on-device, one external:

• System self-assessment: An initial screen where the OS checks its own integrity, covering elements like Play Protect status, Android version number, and bootloader state

• Web verification link: In Android 17 QPR1 Beta 3, a link to a Google support page was added at the end of the verification screen, initiating the second stage of the process

• QR code scan: The support page displays a QR code that must be scanned by the device being verified, alongside an “About” section with additional details on what’s being checked

According to Android Authority, the device under verification generates a unique identifier when the process begins. That code — along with information about the running Android version — is then sent to the device that displayed the QR code.

The user then compares the information on both devices. Matching data means everything checks out. Any discrepancy suggests the device may have been tampered with.

Android Authority wasn’t able to complete the second stage of the verification during testing, as the server-side component isn’t live in Android 17 yet. Since the feature is still in development, there’s no confirmed timeline for when it will reach testers or the general public.