行為變更：所有應用程式

Android 15 平台包含可能對應用程式造成影響的行為變更。無論 targetSdkVersion 為何，當應用程式在 Android 15 上執行時，下列行為變更將會套用至所有應用程式。您應測試應用程式，並視需要修改，以便在適當情況下支援新版本功能。

另請務必查看僅對指定 Android 15 為目標版本的應用程式造成影響的行為變更。

核心功能

Android 15 會修改或擴充 Android 系統的各種核心功能。

變更為套件已停止狀態

套件 FLAG_STOPPED 狀態的意圖 (使用者可以透過長按應用程式圖示並選取「強制停止」來啟用 AOSP 版本) 一向是讓應用程式維持在這個狀態，直到使用者透過直接啟動應用程式或間接與應用程式互動 (透過分享畫面或小工具，將應用程式選做動態桌布等) 明確將應用程式移除為止。在 Android 15 中，我們已更新系統行為，以符合這項預期行為。應用程式應僅透過直接或間接的使用者操作，從停止狀態移除。

為了支援預期的行為，除了現有的限制之外，當應用程式在執行 Android 15 的裝置上進入已停止狀態時，系統也會取消所有待處理意圖。當使用者的動作將應用程式從已停止狀態移除時，系統會將 ACTION_BOOT_COMPLETED 廣播傳送至應用程式，讓應用程式有機會重新註冊任何待處理的意圖。

您可以呼叫新的 ApplicationStartInfo.wasForceStopped() 方法，確認應用程式是否已進入停止狀態。

支援 16 KB 頁面大小

Historically, Android has only supported 4 KB memory page sizes, which has optimized system memory performance for the average amount of total memory that Android devices have typically had. Beginning with Android 15, AOSP supports devices that are configured to use a page size of 16 KB (16 KB devices). If your app uses any NDK libraries, either directly or indirectly through an SDK, then you will need to rebuild your app for it to work on these 16 KB devices.

As device manufacturers continue to build devices with larger amounts of physical memory (RAM), many of these devices will adopt 16 KB (and eventually greater) page sizes to optimize the device's performance. Adding support for 16 KB page size devices enables your app to run on these devices and helps your app benefit from the associated performance improvements. Without recompiling, apps might not work on 16 KB devices when they are productionized in future Android releases.

To help you add support for your app, we've provided guidance on how to check if your app is impacted, how to rebuild your app (if applicable), and how to test your app in a 16 KB environment using emulators (including Android 15 system images for the Android Emulator).

優點和效能提升

Devices configured with 16 KB page sizes use slightly more memory on average, but also gain various performance improvements for both the system and apps:

  • Lower app launch times while the system is under memory pressure: 3.16% lower on average, with more significant improvements (up to 30%) for some apps that we tested
  • Reduced power draw during app launch: 4.56% reduction on average
  • Faster camera launch: 4.48% faster hot starts on average, and 6.60% faster cold starts on average
  • Improved system boot time: improved by 8% (approximately 950 milliseconds) on average

These improvements are based on our initial testing, and results on actual devices will likely differ. We'll provide additional analysis of potential gains for apps as we continue our testing.

確認應用程式是否受到影響

If your app uses any native code, then you should rebuild your app with support for 16 KB devices. If you are unsure if your app uses native code, you can use the APK Analyzer to identify whether any native code is present and then check the alignment of ELF segments for any shared libraries that you find.

If your app only uses code written in the Java programming language or in Kotlin, including all libraries or SDKs, then your app already supports 16 KB devices. Nevertheless, we recommend that you test your app in a 16 KB environment to verify that there are no unexpected regressions in app behavior.

部分應用程式必須進行必要變更，才能支援私人空間

私人空間是 Android 15 的新功能，可讓使用者在裝置上建立獨立空間，在額外的驗證機制下，隱藏敏感應用程式，防止他人查看。由於私人空間中的應用程式可見度受限，某些類型的應用程式需要採取額外步驟，才能查看及與使用者私人空間中的應用程式互動。

所有應用程式

由於私人空間中的應用程式會保存在獨立的使用者資料夾中 (類似工作資料夾)，因此應用程式不應假設任何未位於主要資料夾中的應用程式副本，都位於工作資料夾中。如果您的應用程式包含與工作資料夾應用程式相關的邏輯，且會做出這項假設，您就需要調整這項邏輯。

醫療應用程式

使用者鎖定私人空間後，私人空間中的所有應用程式都會停止，這些應用程式無法執行前景或背景活動，包括顯示通知。這項行為可能會嚴重影響安裝在私人空間中的醫療應用程式使用方式和功能。

私人空間設定體驗會警告使用者，私人空間不適用於需要執行重要前景或背景活動的應用程式，例如顯示醫療應用程式通知。不過，應用程式無法判斷是否在私人空間中使用，因此無法針對這種情況向使用者顯示警告。

基於這些原因，如果您開發醫療應用程式，請查看這項功能可能對應用程式造成的影響，並採取適當行動，例如告知使用者不要在私人空間安裝應用程式，以免中斷重要應用程式功能。

啟動器應用程式

如果您要開發啟動器應用程式，則必須先執行下列操作，才能顯示私人空間中的應用程式：

  1. 您的應用程式必須指派為裝置的預設啟動器應用程式，也就是擁有 ROLE_HOME 角色。
  2. 應用程式必須在應用程式的資訊清單檔案中宣告 ACCESS_HIDDEN_PROFILES 一般權限。

宣告 ACCESS_HIDDEN_PROFILES 權限的啟動器應用程式必須處理下列私人空間用途：

  1. 您的應用程式必須有獨立的啟動器容器，用於安裝在私人空間中的應用程式。使用 getLauncherUserInfo() 方法，判斷要處理哪種類型的使用者設定檔。
  2. 使用者必須能夠隱藏及顯示私人空間容器。
  3. 使用者必須能夠鎖定及解鎖私人空間容器。使用 requestQuietModeEnabled() 方法鎖定 (傳遞 true) 或解鎖 (傳遞 false) 私人空間。

  4. 在鎖定狀態下，私人空間容器中的應用程式不得顯示或透過搜尋等機制發現。應用程式應為 ACTION_PROFILE_AVAILABLE 和 ACTION_PROFILE_UNAVAILABLE 廣播訊息註冊接收器，並在私人空間容器的鎖定或解鎖狀態變更時更新應用程式中的 UI。這兩種廣播都包含 EXTRA_USER，可讓應用程式參照私人設定檔使用者。

    您也可以使用 isQuietModeEnabled() 方法，檢查私人空間設定檔是否已鎖定。

應用程式商店應用程式

私人空間包含「安裝應用程式」按鈕，可啟動隱含意圖，將應用程式安裝至使用者的私人空間。為了讓應用程式接收這項隱含意圖，請在應用程式資訊清單檔案中宣告 <intent-filter>，並使用 CATEGORY_APP_MARKET 的 <category>。

已移除以 PNG 為基礎的表情符號字型

The legacy, PNG-based emoji font file (NotoColorEmojiLegacy.ttf) has been removed, leaving just the vector-based file. Beginning with Android 13 (API level 33), the emoji font file used by the system emoji renderer changed from a PNG-based file to a vector based file. The system retained the legacy font file in Android 13 and 14 for compatibility reasons, so that apps with their own font renderers could continue to use the legacy font file until they were able to upgrade.

To check if your app is affected, search your app's code for references to the NotoColorEmojiLegacy.ttf file.

You can choose to adapt your app in a number of ways:

  • Use platform APIs for text rendering. You can render text to a bitmap-backed Canvas and use that to get a raw image if necessary.
  • Add COLRv1 font support to your app. The FreeType open source library supports COLRv1 in version 2.13.0 and higher.
  • As a last resort, you can bundle the legacy emoji font file (NotoColorEmoji.ttf) into your APK, although in that case your app will be missing the latest emoji updates. For more information, see the Noto Emoji GitHub project page.

將最低目標 SDK 版本從 23 提高至 24

Android 15 builds on the the changes that were made in Android 14 and extends this security further. In Android 15, apps with a targetSdkVersion lower than 24 can't be installed. Requiring apps to meet modern API levels helps to ensure better security and privacy.

Malware often targets lower API levels in order to bypass security and privacy protections that have been introduced in higher Android versions. For example, some malware apps use a targetSdkVersion of 22 to avoid being subjected to the runtime permission model introduced in 2015 by Android 6.0 Marshmallow (API level 23). This Android 15 change makes it harder for malware to avoid security and privacy improvements. Attempting to install an app targeting a lower API level results in an installation failure, with a message like the following one appearing in Logcat:

INSTALL_FAILED_DEPRECATED_SDK_VERSION: App package must target at least SDK version 24, but found 7

On devices upgrading to Android 15, any apps with a targetSdkVersion lower than 24 remain installed.

If you need to test an app targeting an older API level, use the following ADB command:

adb install --bypass-low-target-sdk-block FILENAME.apk

安全性和隱私權

Android 15 introduces robust measures to combat one-time passcode (OTP) fraud and to protect the user's sensitive content, focusing on hardening the Notification Listener Service and screenshare protections. Key enhancements include redacting OTPs from notifications accessible to untrusted apps, hiding notifications during screenshare, and securing app activities when OTPs are posted. These changes aim to keep the user's sensitive content safe from unauthorized actors.

Developers need to be aware of the following to ensure their apps are compatible with the changes in Android 15:

OTP Redaction

Android will stop untrusted apps that implement a NotificationListenerService from reading unredacted content from notifications where an OTP has been detected. Trusted apps such as companion device manager associations are exempt from these restrictions.

Screenshare Protection

  • Notification content is hidden during screen sharing sessions to preserve the user's privacy. If the app implements setPublicVersion(), Android shows the public version of the notification which serves as a replacement notification in insecure contexts. Otherwise, the notification content is redacted without any further context.
  • Sensitive content like password input is hidden from remote viewers to prevent revealing the user's sensitive information.
  • Activities from apps that post notifications during screenshare where an OTP has been detected will be hidden. App content is hidden from the remote viewer when launched.
  • Beyond Android's automatic identification of sensitive fields, developers can manually mark parts of their app as sensitive using setContentSensitivity, which is hidden from remote viewers during screenshare.
  • Developers can choose to toggle the Disable screen share protections option under Developer Options to be exempted from the screenshare protections for demo or testing purposes. The default system screen recorder is exempted from these changes, since the recordings remain on-device.

相機和媒體

Android 15 會對所有應用程式的相機和媒體行為進行以下變更。

當達到資源限制時，直接和卸載音訊播放功能會使先前開啟的直接或卸載音訊曲目失效

在 Android 15 之前，如果應用程式在其他應用程式播放音訊時要求直接或卸載音訊播放，且已達到資源限制，應用程式就會無法開啟新的 AudioTrack。

自 Android 15 起，當應用程式要求直接或卸載播放功能，且已達到資源限制時，系統會使任何目前開啟的 AudioTrack 物件失效，以免無法滿足新曲目要求。

(直接和卸載音訊音軌通常會在播放壓縮音訊格式時開啟。直接播放音訊的常見用途包括透過 HDMI 將編碼音訊串流至電視。卸載音軌通常用於在行動裝置上播放經過壓縮的音訊，並使用硬體 DSP 加速功能。

使用者體驗和系統 UI

Android 15 包含一些變更，旨在打造更一致、直覺的使用者體驗。

為已選擇加入的應用程式啟用預測返回動畫

Beginning in Android 15, the developer option for predictive back animations has been removed. System animations such as back-to-home, cross-task, and cross-activity now appear for apps that have opted in to the predictive back gesture either entirely or at an activity level. If your app is affected, take the following actions:

  • Ensure that your app has been properly migrated to use the predictive back gesture.
  • Ensure that your fragment transitions work with predictive back navigation.
  • Migrate away from animation and framework transitions and use animator and androidx transitions instead.
  • Migrate away from back stacks that FragmentManager doesn't know about. Use back stacks managed by FragmentManager or by the Navigation component instead.

使用者強制停止應用程式時，小工具會停用

如果使用者在搭載 Android 15 的裝置上強制停止應用程式，系統會暫時停用所有應用程式小工具。小工具會顯示為灰色，使用者無法與其互動。這是因為從 Android 15 開始，系統會在應用程式強制停止時取消所有應用程式的待處理意圖。

系統會在使用者下次啟動應用程式時，重新啟用這些小工具。

詳情請參閱「套件停止狀態的變更」。

媒體投放狀態列方塊會提醒使用者分享螢幕畫面、投放內容和錄製畫面

Screen projection exploits expose private user data such as financial information because users don't realize their device screen is being shared.

For apps running on devices with Android 15 QPR1 or higher, a status bar chip that is large and prominent alerts users to any in‑progress screen projection. Users can tap the chip to stop their screen from being shared, cast, or recorded. Also, screen projection automatically stops when the device screen is locked.

用於螢幕分享、投放和錄製的狀態列方塊。

確認應用程式是否受到影響

根據預設，應用程式會包含狀態列方塊，並在螢幕鎖定畫面啟用時自動暫停投放螢幕畫面。

如要進一步瞭解如何針對這些用途測試應用程式，請參閱「狀態列方塊和自動停止」。

背景網路存取權限制

In Android 15, apps that start a network request outside of a valid process lifecycle receive an exception. Typically, an UnknownHostException or other socket-related IOException. Network requests that happen outside of a valid lifecycle are usually due to apps unknowingly continuing a network request even after the app is no longer active.

To mitigate this exception, ensure your network requests are lifecycle aware and cancelled upon leaving a valid process lifecycle by using lifecycle aware components. If it is important that the network request should happen even when the user leaves the application, consider scheduling the network request using WorkManager or continue a user visible task using Foreground Service.

淘汰項目

每次發布時，特定 Android API 都可能會淘汰，或需要重構，以提供更優質的開發人員體驗，或支援新的平台功能。在這種情況下，我們會正式淘汰過時的 API，並引導開發人員改用其他 API。

淘汰是指我們已終止對 API 的官方支援，但開發人員仍可繼續使用這些 API。如要進一步瞭解此 Android 版本中的重要淘汰項目，請參閱淘汰項目頁面。