Direct answer. An APK (Android Package) is the file format Android uses to install an app. It is a single archive that holds the app's code, images, layouts and a manifest describing what the app is and what it may do. Installing from Google Play uses a packaged form of the same thing. When people say "an APK", they usually mean a file they downloaded and installed by hand.
Key takeaways
- An APK is a normal, legitimate Android file format. The format is not the risk; the source of the file is.
- Inside every APK are code, resources, a manifest and a digital signature.
- Google Play now delivers most apps as split packages built from an Android App Bundle, so a single APK for a Play app may not exist.
- Package name, version code and signature decide whether Android accepts an install or an update.
- An APK from outside a store has not passed a store's review, so you do the checking.
What is inside an APK
An APK is built on the ZIP format. If you rename a copy to end in .zip and open it, you will see folders and files. The most important ones are:
| Item | What it contains |
|---|---|
| AndroidManifest.xml | The app's package name, version, required Android version, and the permissions it requests |
| classes.dex | The compiled program code (there can be several of these files) |
| res/ and resources.arsc | Images, layouts, text and other resources the app uses |
| lib/ | Native libraries, in separate folders per processor type such as arm64-v8a |
| assets/ | Raw files the app bundles, such as fonts or data |
| META-INF/ | Signature information for older signing schemes |
Newer signing schemes store signature data in a special block in the file rather than as a normal entry, so a ZIP tool does not show everything that protects the file.
The three identifiers that matter
Package name. A unique ID such as com.example.player. It is the app's identity on your device. Two apps with different package names are different apps, even if they look identical on screen. A copy of a popular app with a slightly different package name is a different app, and often an unwanted one.
Version name and version code. The version name is what people read, such as 2.4. The version code is an internal number that only goes up. Android refuses to replace a newer version with an older one by default.
Signing certificate. Every installable APK is signed. An update installs only if it is signed by the same certificate as the version already installed. This is how Android stops a stranger from silently replacing your banking app, and also why mixing sources for one app often ends in an "App not installed" error.
APK versus Google Play apps
Google Play does not usually hand your phone a single APK. Developers upload an Android App Bundle (AAB), and Play builds a set of split APKs for your device: one base package plus pieces for your screen density, language and processor. This makes downloads smaller. It also means there is not always one universal file to download, which is a reason to be cautious about any website that offers "the APK" of a Play-only app. You cannot be sure what it is.
Other app stores exist, such as the Samsung Galaxy Store, the Amazon Appstore and the open-source F-Droid, and each has its own review process. Apps you install from any of these are still installed as APK packages underneath.
Who uses APK files, and why
- Developers and testers install builds directly while an app is being made.
- Companies distribute internal tools to staff without publishing them publicly.
- People in regions or on devices without Google Play install apps from other stores or directly from a developer.
- People who want an older version of an app sometimes install one by hand.
The last group deserves care. Older versions can carry security problems that were fixed later.
How an APK differs from other files
An APK is not a program you can run on Windows or on an iPhone. iOS apps use a different format, and Windows runs its own. Microsoft ended support for its Android subsystem on Windows in 2025, so running an APK on a PC now needs a third-party emulator.
What Android checks when you open one
When you install an APK, Android reads the manifest, checks that the signature is valid and consistent with any installed version, confirms that your Android version and processor type are supported, and shows you the permissions requested. Google Play Protect may also scan the file. What Android does not check is whether the signer is trustworthy or the app is honest. That is the job of the person installing it.
How to look at an APK safely
You do not need to install a file to learn about it. On a computer, the Android SDK tool aapt dump badging file.apk prints the package name, version and requested permissions. The tool apksigner verify --print-certs file.apk prints the signing certificate. Our guide [How to Check an APK Before Installing] walks through both.
Common misunderstandings
- "An APK is a virus." It is not. It is a container, and what it holds decides the risk.
- "If it installs, it is safe." Android will install malware that is correctly signed. Installing only proves the file is well-formed.
- "An APK from the same website is the same app." Sites change files without notice. Compare a checksum from the developer's own site.
- "Bigger means more features." File size varies with bundled libraries and processor types and says little on its own.
FAQ
What does APK stand for?
Android Package. Some sources write Android Package Kit.
Is an APK the same as an app?
It is the package the app is installed from. After installation, the app lives on your device and the file is no longer needed.
Can I open an APK on my computer?
You can open it as an archive to inspect its contents, but you cannot run it on Windows without an emulator.
Are APK files legal?
The format is legal. Whether you may use a particular app or its content depends on its licence and the law where you live.
Why does an APK work on one phone and not another?
The Android version, processor type or screen may not match. See [ARM64 vs ARMv7] and [Why APKs Differ Between Devices].
Related guides
- What Is APK Sideloading?
- [How Android Package Installation Works]
- [What Is an APK Signature?]
- [What Is an Android Package Name?]
- [Are APK Files Safe?]
Conclusion
An APK is simply how an Android app is packaged. It is useful and ordinary. The question to ask about any one of them is where it came from, who signed it and what it asks for.