Super Funicular

Posted on Sep 3

Best Android Security Camera Apps You Can Actually Install in 2026 - and the Sept 30 Deadline Myth

#android #privacy #security #mobile

Most "best security camera app" lists rank on features. This one ranks on something duller and, in 2026, more decisive: can you still install it, and will it still update next year?

Google is rolling out a developer verification programme that changes how Android apps get onto certified devices. The version of this story you have probably read — "sideloading dies on September 30, 2026" — is contradicted by Google's own FAQ. But something real does happen on that date, Google's own pages disagree with each other about how far it reaches, and one of the most-recommended apps in this category is no longer on Google Play at all.

Here is the field, ranked on distribution durability, with every claim sourced to a page I read on 2026-09-03.

Which Android security camera app is safest to install in 2026?

Short answer: Background Camera RemoteStream, because it is distributed through Google Play as a normal free install — no account, no subscription, no credit card, and no sideloading step. Every app in this category faces the same registration deadline of September 30, 2026, but apps that are already on Play were auto-registered by Google, while apps distributed only as sideloaded APKs have no equivalent safety net and at least one has already gone dark.

That answer is about distribution, not motion detection. It matters because the failure mode people actually hit is not "the app was mediocre" — it is "the app is gone, or it will not update, or it now wants a card number."

Can Android still sideload apps after September 30, 2026?

Short answer: Yes, according to Google's own FAQ, which was updated on July 15, 2026 and states that "if users sideload your app directly, these new verification requirements won't apply." The September 30 deadline applies to seven named app stores in four countries — Brazil, Indonesia, Singapore and Thailand. The blanket, global phase is scheduled for "2027 and beyond," with no announced month.

This is the most misreported fact in Android right now, and two different Google pages say two different things.

The original announcement, on the Android Developers Blog in August 2025, used broad language: "any app installed on a certified Android device in these regions must be registered." That sentence is where the "sideloading is over" framing comes from. It was later narrowed in the FAQ — and never retracted.

Then it gets genuinely confusing. The limited-distribution guide on developer.android.com, last updated 2026-08-20 — newer than the FAQ entry that narrows the scope — says, with no store qualifier: "Any package names not registered by this date will no longer be installable." The FAQ, updated 2026-07-15, says "The September 30, 2026 deadline only applies to the specific participating stores."

Both are first-party. Both are live as I write this. I am not going to pretend to resolve them. Read both, and do not trust a third-party summary — including this one — over a page you can open yourself.

What actually happens on September 30, 2026

Two different penalties key off the same date, with very different blast radii. Conflating them is the second most common error in the coverage.

1. Regional install-blocking. In Brazil, Indonesia, Singapore and Thailand, app registration becomes required for seven participating stores: Google Play, HONOR App Market, OPPO App Market, Galaxy Store, Palm Store, V-Appstore and GetApps. Google's user-facing help page says that for an unregistered app "you'll get a notification and you won't be able to install the app," and that an app "must be registered by a verified developer to be installed and receive updates."

2. Global removal from Google Play. This one is not regional at all. The Play Console Requirements policy, effective September 30, 2026, says developers "must register your Play apps in Play Console" to "avoid global removal from Google Play." Google auto-registered the overwhelming majority of existing Play apps; the residual is the exposure.

So: the install block is four countries. The Play removal is everywhere. Same date, different mechanisms.

The enforcement runs through a Google system service — Android Help names it "Android Developer Verifier (package name: com.google.android.verifier)" — delivered via Google Play services rather than an OS update. That is why it can reach phones that will never see another Android version.

If you are in India, Bangladesh, Iraq, Algeria or a similar market

You are not in the first wave. Brazil, Indonesia, Singapore and Thailand are the only four countries named on any first-party page. Nothing changes for you on September 30 at the install level.

Three exemptions matter more here than anywhere else, and all three are quoted from Google's own help page and FAQ:

AOSP and non-certified devices are exempt. Google's help page footnote says "(AOSP) and non-certified devices are exempt from this requirement."
Regions without Google Mobile Services are out of scope. The same footnote: it "does not apply in regions where Google Mobile Services are unsupported."
Sanctioned countries are excluded on the developer side. The FAQ: "Developers in sanctioned countries will be excluded from Android developer verification checks."

There is also a free tier for small developers — a "limited distribution" account. Google's page says plainly "This account is free" and "you don't need to provide a government ID." The catch is a hard ceiling of "up to 20 devices that end-users have explicitly authorized," plus a required Google payments profile carrying your legal name and address. The full account costs $25 and requires a government-issued photo ID and proof of address; organisations additionally need a D-U-N-S number.

If you have ever installed an app from a friend's phone, a shop, or a WhatsApp forward, this is the part to watch in 2027 — not 2026.

The field at a glance

App	Play package	Play listing today	Account needed	Free tier	Open source
Background Camera RemoteStream	`com.superfunicular.digicam`	HTTP 200	No	Yes, no cap, no card	No
IP Webcam (Lite)	`com.pas.webcam`	HTTP 200	Not documented	Yes, ad-supported	No
AlfredCamera	`com.ivuu`	HTTP 200	Yes	Yes, metered	No
AtHome Video Streamer	`com.ichano.athome.avs`	HTTP 200	Not documented	Yes	No
WardenCam	`com.warden.cam`	HTTP 200, updated Jun 2023	Yes, Google account	Trial hours only	No
FadCam	`com.fadcam`	HTTP 404	Not documented	Yes	Yes, GPL-3.0
Haven	`org.havenapp.main`	HTTP 404	Not documented	Yes	Yes, GPL-3.0
Presence	`com.peoplepowerco.presencepro`	HTTP 404	—	—	No

Every status code above was observed on 2026-09-03 with a browser user agent, retested across three URL shapes and two regions, with a known-good control listing returning 200 in all three shapes. The 404s are the listings, not the URL form.

1. Background Camera RemoteStream — the frictionless install

Play: com.superfunicular.digicam — listing here. HTTP 200.

It records with the screen off, serves a live view from a built-in web server so any device on your network can watch in a browser with nothing installed, and can stream to YouTube Live. Storage is local to the phone. There is no cloud tier, so there is nothing to meter and nothing to cancel.

On the axis this article is about, here is what that buys you:

One tap to install. No "install unknown apps" permission, no F-Droid client, no APK file to verify by hand.
No account. Nothing to sign up for, no email, no Google sign-in required to use the camera.
No credit card, anywhere in the flow. There is no subscription to forget to cancel and no trial clock.
Updates arrive the normal way, through Play, on a phone that may be years past its last Android update.

And the honest part, because you should not have to take my word for any of it: this app is subject to the same Play Console registration requirement as everything else on that table, on the same date, worldwide. There is no exemption for small developers, no open-source carve-out, and no privacy-app carve-out — I looked for all three in the first-party documentation and none exists. I am not going to publish a compliance badge I cannot show you. What I can point at is the listing above: open it, and see whether it loads.

Where it is weaker than the alternatives: remote viewing from outside your own network requires you to do the networking work yourself (a VPN such as Tailscale or WireGuard), where relay-based competitors give it to you for free and charge you for it in data caps instead. It is not open source. It has no motion detection or two-way audio.

Best for: anyone who wants the shortest possible path from "I have an old phone" to "I can see the shop from my other phone," and who does not want to be a system administrator to get there.

2. IP Webcam — the other genuinely unmetered option

Play: com.pas.webcam — HTTP 200, "Contains ads," 10M+ downloads, updated May 26, 2026. The paid version is a separate app, com.pas.webcam.pro, listed at $4.99 as a one-time purchase — the Play button reads "Buy," not "Install." No subscription.

The vendor is unusually honest about the free/paid split, stating on the Pro listing that the Lite version's "only limitations are lack of Tasker integration and customizable user interface." No camera cap, no recording-length limit, no watermark is documented anywhere.

Pros: LAN streaming with no internet dependency; the cloud broadcast option is described by the vendor as "optional"; a one-time price rather than a subscription; very long track record.

Cons: the interface is dense and unapologetically technical. And a filing note that matters if you are checking the developer's identity in a verification world: the app is widely credited to Pavel Khlebovich, but the Google Play developer field on both packages today reads "Thyoni Tech." I am not speculating about why. If you are choosing on provenance, look at the listing yourself.

Best for: technical users who want maximum control and will read a settings screen.

3. AlfredCamera — the biggest name, and a free tier that is being narrowed

Play: com.ivuu — HTTP 200, 50M+ downloads, 4.7 stars across 1M reviews, updated Aug 17, 2026. "Contains ads" and "In-app purchases."

An account is required — Google, Apple, or a verified email address. There is no free trial of the paid tier; the vendor states "we do not offer a free trial period at this moment."

From Alfred's own published plan comparison, the free tier is: 2 active cameras, 1 concurrent viewer, basic resolution, 1x zoom, 30-second recordings, ads, watermark, local event storage only, motion detection but no person/pet/vehicle detection, and no continuous recording.

Date this carefully, because the coverage does not. The 2-camera figure comes from a vendor announcement dated March 13, 2026, with effective dates of March 16 (US) and April 7 (other regions). But the same announcement calls the plan-structure change "a gradual, phased rollout of the new plan structures later in 2026," and says users "will receive a personalized notification in the app well before any changes affect your specific account." So the cap is published as current and is not confirmed as enforced on every account yet. Overflow cameras are not deleted — the vendor says the system "will automatically manage your online slots," prioritising cameras with recent activity.

Pros: by far the most polished experience, huge install base, genuinely easy setup, still on Play.
Cons: account mandatory; ads and a watermark on free; 30-second clips; the free tier is moving in one direction.

4. AtHome Video Streamer — the closest like-for-like still shipping

Play: com.ichano.athome.avs — HTTP 200, 5M+ downloads, updated Nov 13, 2025, no ads badge on the streamer half. Its viewer counterpart, com.ichano.athome.camera, is also live at HTTP 200 (ads and in-app purchases).

The two-app split — one for the phone that films, one for the phone that watches — is the classic architecture in this category and it works. I could not obtain a vendor pricing page, so I am not going to state free-tier limits I have not read. That absence is itself worth knowing before you build a household setup on it.

Pros: live on Play, actively updated, established.
Cons: free-tier terms not documented on any page I could reach; the app-pair model means the watching device needs an install too.

5. WardenCam — on Play, but check the date

Play: com.warden.cam — HTTP 200, 10M+ downloads, 4.1 stars. Last updated June 17, 2023. Three years without an update is a distribution fact, not an aesthetic one: it tells you something about who is available to complete a registration deadline.

A Google account is required, and it is the pairing mechanism — the vendor's own description says to "sign in with the same Google Account" on both devices, "that's how the 2 devices can find each other."

The free tier is not a free tier. The vendor's manual calls it "free to try and test," with "free-trial hours" shown in the camera menu, and says: "If the trial time expires, please upgrade, or email support@wardencam360.com to ask for more trial time." The actual number of trial hours is never stated. Upgrading is a one-time purchase, not a subscription, and the licence does not cross platforms — the vendor says you need separate licences for Apple and Google. Viewer devices are free.

Pros: one-time price, no monthly fee, viewer devices free, and the vendor offers a manual activation path where Play billing is unavailable — which is a real courtesy in markets Play does not serve well.
Cons: a metered trial dressed as a free tier; a mandatory Google account; and a 2023 build.

6. FadCam — excellent, open source, and not on Google Play

This is a good app and I want to be accurate about it, because I have seen the inaccurate version repeated — including in guidance I was handed for this article.

The Play URL 404s. com.fadcam returns HTTP 404. But I could find no statement from the developer, on GitHub, F-Droid or IzzyOnDroid, describing a removal, ban or takedown. What the repository actually shows is a "Pre-Register on Google Play" badge — a pre-registration page, not a published listing — and in the current README both Play badges are wrapped in HTML comments, i.e. deliberately hidden. IzzyOnDroid renders its Play field as "Google Play: Check if it's there," which is its generic fallback when no listing is registered.

So the correct claim is "not on Play; the Play link is dead," not "banned from Play." I had the banned version in my notes. It does not survive contact with the sources, and I am not going to print a takedown story about another developer that I cannot show you.

What is verifiable: GPL-3.0-only, 2,748 GitHub stars, last push 2026-09-01 — actively maintained. Version 3.0.1, added to F-Droid December 18, 2025. The F-Droid APK is 69,500,778 bytes (measured from the download's Content-Length) and requires Android 9.0 or newer. Distribution is F-Droid, IzzyOnDroid, GitHub releases and SourceForge. There is a paid "FadCam Pro" lifetime unlock sold through Patreon, not Play billing. F-Droid declares one anti-feature: it "depends entirely on a non-free network service — Connects to Cloudflare for WhatsNew and Github for update check."

On the axis of this article: every install path is a sideload. F-Droid's own page warns that installing the APK directly means "you will not receive update notifications and it's a less secure way to download," and recommends using the F-Droid client — which itself needs install permission. Under the 2027 global phase, key-bound package registration and F-Droid's practice of building and signing from source is a genuinely unresolved interaction, and no Google page mentions F-Droid at all. I checked; see the last section.

Pros: open source, no ads, no trackers, screen-off recording, a LAN web interface, and an active maintainer.
Cons: sideload-only, a 66 MB download on whatever data you are paying for, Android 9.0 minimum, and a distribution model with no documented answer to the 2027 question.

7. Haven and Presence — the cautionary entries

Haven (Guardian Project), org.havenapp.main: 404 on Google Play and 404 on the main F-Droid repository. Its own website still lists "Download Haven from Google Play" as install option #1, and I confirmed the link target is exactly that dead Play URL. The only live channels are the project's nightly F-Droid repo — whose index carries a timestamp of 2019-04-29 — and GitHub, where the newest release is 0.2.1-beta-1 from July 20, 2021. The repository's last push was 2022-10-26. It is also a different kind of tool: a sensor-based intrusion detector, not a continuous camera.

Presence (People Power), com.peoplepowerco.presencepro: 404, in every URL shape and both regions I tested. I found no vendor or press announcement of a delisting. Widely-circulated figures about its free storage and upgrade price appear only in aggregator snippets, so I am not printing them.

Both are still recommended in "best of" lists across the web. A recommendation is not a listing. Click the link before you trust the list — including this one.

The verdict

If you rank on distribution durability rather than feature count:

Background Camera RemoteStream — on Play, no account, no card, no cap, one tap. Weakest on remote access outside your own network.
IP Webcam — on Play, unmetered, one-time $4.99 upgrade if you want it. Weakest on interface.
AlfredCamera — on Play and excellent, but an account is mandatory and the free tier is narrowing on a published schedule.
AtHome Video Streamer — on Play and current, but its free-tier terms are undocumented.
WardenCam — on Play, but a 2023 build and a trial measured in unstated hours.
FadCam — the best of the sideload-only options by a distance, and the one with the most unresolved 2027 exposure.
Haven / Presence — do not start here in 2026.

The practical test, which takes ten seconds and beats every roundup including this one: open the Play link, and see whether it loads. Then check the "Updated" date on the listing. An app that has not shipped a build since 2023 is unlikely to complete a registration process in 2026.

What the documentation does not tell you

Six things I went looking for and could not find in any first-party source. I would rather hand you the gaps than paper over them.

Whether an app already installed on your phone keeps working if its developer never verifies. Every Google statement I found is scoped to install and update. Nothing says an existing install keeps running; nothing says it is disabled. The Developer Console help page says such apps "will be unavailable for new installation," which hints at grandfathering without stating it. This is the question most readers will actually care about, and it is undocumented.
Whether there is any open-source or FOSS exemption. No first-party page mentions open source as a category. The only ID-free path is the 20-device limited distribution account, which is defined by audience size, not by licence.
F-Droid, at all. Zero mentions across every first-party page I fetched, confirmed by grep. How a store that re-signs apps with its own keys interacts with signing-key-bound package registration is unaddressed.
What happens to an app removed from Play that then distributes only as sideloaded APKs — including whether its developer retains Play Console access to register packages.
Android 7 or Android 8? Two developer-facing Google pages say the requirement applies to "certified devices running Android 7+." The user-facing Android Help page says "Android 8 and up." Both are current. Neither is reconciled anywhere. On old hardware this is exactly the line that decides whether you are affected.
Which countries come after the first four, and when. Only Brazil, Indonesia, Singapore and Thailand are named on any first-party page. "2027 and beyond" is the entire published schedule, and it is explicitly conditioned on partner and developer feedback.

If you want to know how your own phone behaves, the honest move is a five-minute experiment rather than a guess: check whether com.google.android.verifier is present in your device's app list, and check what your Play listings say today. That is more reliable than any article about what Google will do.

DEV Community