Skip to content
Manifesto
NotesOct 30, 2026·3 min read

Why Manifesto lives outside the Play Store

Manifesto needs permissions Google Play restricts and downloads tools like Frida from outside Play. The policies that apply, and how to sideload safely.


Manifesto isn't on Google Play because the things that make it useful are the things Play restricts most. It asks for three permissions Play reviews one by one, and it downloads executable tools such as Frida and an Alpine Linux system from outside Play. So we distribute Manifesto's APK editor for Android as a signed APK from this site instead.

Which Google Play policies apply to Manifesto?

As of November 2026, these are the Play Console Help pages that cover what Manifesto does:

  • All files access. The file manager needs MANAGE_EXTERNAL_STORAGE to reach your APKs and folders. Play's All files access policy allows it only when the app's core purpose needs it, such as file management, and only after a declaration and review.
  • Seeing installed apps. Installed Apps and Extract APK need QUERY_ALL_PACKAGES. Play's package visibility policy limits it to apps whose core function needs broad visibility, again with a declaration.
  • Installing APKs. Installing rebuilt APKs and split sets needs REQUEST_INSTALL_PACKAGES. Play's REQUEST_INSTALL_PACKAGES policy allows it only when sending or receiving app packages and user-started installs are core functions.
  • Downloaded tools. Play's Device and Network Abuse policy says an app may not download executable code from a source other than Google Play. Manifesto downloads pinned Frida binaries from Frida's GitHub releases and the Alpine Linux system for its shell from Alpine's mirror, on request.

A file manager can qualify for the first three. A reverse-engineering workbench that also downloads its own tools is a much harder fit, and we'd rather not cut features to pass review.

Sideloading safely

  • Download only from the official download page.
  • Updates must be signed with the same key. If Android refuses an update with a signature error, don't force it. Get the APK from the official page again.
  • After installing, you can switch "Install unknown apps" back off for your browser.

Updates

Install a newer APK over the existing one. Your projects, keys and settings stay where they are. The getting started docs cover the first launch and the All files access prompt.