What Is “Unknown Sources” in Kodi?
“Unknown sources” is a security toggle within Kodi that, when enabled, allows you to install third-party add-ons from outside the official Kodi repository. This setting is disabled by default for privacy and security reasons, but it is required before you can install any community-developed add-on or build.
Explore the ultimate Kodi guide for a complete overview.
STATUS DISCLAIMER
Feature Status: WORKING
Kodi Versions Covered: Kodi 19 “Matrix,” Kodi 20 “Nexus,” Kodi 21 “Omega,” and Kodi 22 “Piers” (Beta 1 — released June 28, 2026)
CRITICAL SECURITY WARNING: Enabling “unknown sources” allows installation of any third-party add-on, including malicious ones. In 2018, cybersecurity firm ESET identified cryptomining malware being distributed through popular Kodi add-on repositories. The malware was found in the XvBMC repository and spread through Bubbles and Gaia add-ons. This remains a relevant warning today, as the same attack vectors — compromised third-party repositories and malicious updates — still exist. Attackers have exploited Kodi’s update verification system to push malware via unofficial repositories. Only install add-ons from trusted sources and always use a VPN to protect your privacy. Compare the best VPN providers for Kodi to stay secure.
If you’re unsure about a specific add-on, stick to the official Kodi repository or use legitimate alternatives like Tubi, Pluto TV, or YouTube add-ons available through official channels.
Check our curated list of the best Kodi addons for trusted recommendations.
What Is This Guide About?
What It Is
This guide walks you through the exact steps to enable “installation from unknown sources” on any version of Kodi running on any device—including Windows, macOS, Linux, Android, Fire TV, and Android TV.
Who Is This Guide For?
- New Kodi users who want to install their first third-party add-on
- Experienced users who need a quick refresher on where the setting is located
- Firestick/Fire TV users who also need to enable system-level permissions. Learn how to enable Developer Options on Fire TV for sideloading.
- Anyone who has encountered the “Installation Failed” or “Unknown Sources” error message
Value Proposition
By the end of this guide, you will:
- Understand why “unknown sources” is disabled by default
- Know exactly where to find the setting in any Kodi version
- Be able to enable the setting in under 60 seconds
- Understand the security implications and how to protect yourself
- Know how to disable the setting after installation for added safety
Quick-Reference
For experienced users—skip the reading and enable now.
| Action | Navigation Path | Time |
|---|---|---|
| Open Kodi Settings | Click the gear icon in the top-left corner | 2 seconds |
| Navigate to System | Click System (bottom-right box) | 2 seconds |
| Find Add-ons | Select Add-ons from the left sidebar | 2 seconds |
| Enable Unknown Sources | Toggle Unknown sources to ON | 3 seconds |
| Confirm Warning | Click Yes when prompted | 2 seconds |
| DONE | You can now install third-party add-ons | Total: ~60 seconds |
Step-by-Step: Enable Unknown Sources on Kodi
The most interesting Kodi add-ons are included in third-party repositories. So, the first thing you have to do if you want to install a third-party add-on on Kodi is to enable installation from unknown sources. Discover the best Kodi repositories for finding trusted add-ons.
The activation will not take you more than a minute. The procedure is nearly identical across all Kodi versions—from Kodi 19 “Matrix” through Kodi 22 “Piers” (Beta 1). Confirmed by Kodi community forum posts.
Step 1: Open Kodi and Go to Settings
Open Kodi and go to the home page. From there, access the Kodi settings. To access it, click on the icon with a gear, located at the top left of the screen, just below the Kodi logo.
Reference Image: See Figure 1 below.
Figure 1: Click the gear icon to access Kodi Settings.
Step 2: Enter System Settings
Click System Settings—the box at the bottom right of the screen. This option may also be labeled simply System, depending on your version of Kodi.
Reference Image: See Figure 2 below.
Figure 2: Select System (bottom-right) to access system settings.
Step 3: Navigate to Add-ons
In the menu on the left, click Add-ons. In the right panel, you will see the Unknown sources option.
Reference Image: See Figure 3 below.
Figure 3: Select Add-ons from the left menu.
Step 4: Enable Unknown Sources
Click on Unknown sources. You will see a warning message when you activate this option. Don’t worry—accept the warning.
Reference Image: See Figure 4 below.
Figure 4: Toggle Unknown Sources ON and confirm by clicking Yes.
The option is disabled by default for privacy and security reasons, but you must enable it before you can install add-ons from outside the official Kodi repository.
Upon the warning window, click Yes.
Step 5: Verify the Setting
To make sure that the unknown sources option is activated, go back into the panel and confirm that the option is toggled ON.
And that’s all. Now you can install plugins provided by third parties. Explore the best Kodi sports addons once you’ve enabled this setting.
Important: Disable After Installation
For enhanced security, consider disabling “unknown sources” again after you have finished installing all desired add-ons. This prevents accidental or unauthorized installations from untrusted sources in the future. Learn how to reset Kodi to default settings if you encounter issues.
Fire TV / Firestick Users: Additional System-Level Permission
If you are using Kodi on an Amazon Fire TV or Firestick, you must also enable system-level permissions in addition to the Kodi setting above.
For Firestick / Fire TV (Fire OS 7 or 8):
- From the Firestick home screen, navigate to Settings (gear icon).
- Select My Fire TV (or Device & Software).
- Click About.
- Quickly click on Fire TV Stick 7 times until you see “No need, you are already a developer.”
- Press the back button. You will now see Developer Options in the menu.
- Click Developer Options.
- Select Apps from Unknown Sources (or Install Unknown Apps) and turn it ON.
VEGA OS WARNING: Newer Fire TV models (Fire TV Stick 4K Select – Oct 2025, Fire TV Stick HD – Apr 2026) run Vega OS — a Linux-based operating system that does NOT support sideloading at all. On Vega OS devices, even enabling Developer Options requires registering the device with Amazon using a developer account — and even then, no Android APK will run. To check your OS: go to Settings > My Fire TV > About. If you see Fire OS 7 or 8, you can sideload. If it says Vega OS, sideloading is not possible. Read our full Vega OS analysis to understand the impact.
For Android TV / Google TV:
- Go to Settings.
- Select Apps → Security & Restrictions → Unknown Sources.
- Enable it for the app you’ll use to install (e.g., Downloader). Learn how to install APKs on Android TV devices for more details.
Troubleshooting: How to Fix Common Unknown Sources Errors
“Unknown sources” option is grayed out / missing
Cause: Settings level is set to “Basic” instead of “Expert”.
Solution: Change settings level to “Expert” — look for the Settings level indicator at the bottom-left corner of the Settings screen.
Cannot find “Unknown sources” in Settings
Cause: Using an older Kodi version where the path differs.
Solution: Navigate to Settings → System Settings → Add-ons.
“Installation Failed” error when installing add-on
Cause: Unknown sources not enabled OR corrupted zip file.
Solution: Verify Unknown Sources is ON. Re-download the zip file from a trusted source. Fix Kodi dependency installation errors with our guide.
Add-on installs but doesn’t work / crashes
Cause: Incompatible with your Kodi version.
Solution: Check if the add-on supports your Kodi version (v21 Omega vs v22 Piers Beta 1). Troubleshoot common Kodi problems for more fixes.
Firestick: “Install Unknown Apps” option missing
Cause: Developer Options not enabled.
Solution: Click “Fire TV Stick” 7 times in About section to enable Developer Options.
Firestick Vega OS: Cannot install any APK
Cause: Device runs Vega OS (no sideloading support).
Solution: Sideloading is impossible on Vega OS devices. Consider an Android TV device instead.
Warning: “These 3rd party add-ons will be granted access to your personal data”
Cause: Standard security warning when enabling Unknown Sources.
Solution: Read carefully. Only install from trusted sources. Our trusted add-on recommendations can help.
Add-on fails to install dependencies
Cause: Missing repository or outdated Kodi version.
Solution: Install the repository first, then install the add-on from the repository.
Safety & Legal Disclaimers
Is Enabling “Unknown Sources” Legal?
Yes—enabling “unknown sources” itself is completely legal. Kodi is an open-source media player, and the setting exists to allow users to extend its functionality with community-developed add-ons.
However, the legal boundary is crossed when you use third-party add-ons to stream copyrighted content without authorization. Kodi does not condone piracy, and many add-ons and repositories have been banned by the Kodi team for violating their forum rules.
Security Risks of Third-Party Add-ons
REAL THREATS EXIST
- Malware & Cryptomining: In 2018, cybersecurity firm ESET discovered that at least three popular Kodi repositories were distributing cryptomining malware that secretly mines cryptocurrency on users’ devices. The malware was found in the XvBMC repository and spread through Bubbles and Gaia add-ons. This remains a relevant warning today.
- Data Theft: Malicious add-ons can access your personal data, including stored credentials and browsing history.
- Compromised Updates: Attackers have exploited Kodi’s update verification system to push malware through unofficial repositories.
- Legal Liability: In some jurisdictions, accessing illegal streams can result in fines or legal action.
How to Protect Yourself
- Only install from trusted sources—stick to well-known repositories with active communities. Our list of trusted Kodi repositories is a great starting point.
- Scan APKs with VirusTotal before installing on Android/Fire TV
- Use a VPN—hides your IP address and streaming activity from your ISP. Surfshark and ExpressVPN are top choices.
- Disable “unknown sources” after installing your add-ons
- Keep Kodi updated—official updates patch security vulnerabilities. Learn how to update Kodi to the latest version.
- Review add-on permissions—revoke anything unnecessary
- Avoid “all-in-one” repositories that bundle add-ons from multiple, unvetted authors
Recommended VPN
A VPN is essential for anyone using third-party Kodi add-ons. It encrypts your connection, hides your IP address, and prevents ISP throttling. ExpressVPN and Surfshark are widely recommended for Kodi users. Compare all top VPN providers to find the right fit.
Frequently Asked Questions
Why is “Unknown sources” disabled by default?
Kodi disables this setting by default for security and privacy reasons. The official Kodi repository is the only trusted source. Enabling unknown sources allows installation of add-ons that may contain malware, steal data, or access illegal content. Kodi prioritizes user safety by requiring a deliberate action to enable this feature.
Is it safe to enable “Unknown sources”?
It depends on what you install afterward. The setting itself is safe—it’s just a toggle. The risk comes from the add-ons you install after enabling it. If you only install add-ons from trusted, well-known sources with active communities, the risk is minimal. If you install random add-ons from unknown sources, you expose yourself to malware, data theft, and legal liability.
Does enabling “Unknown sources” affect Kodi performance?
No—the setting itself has zero impact on performance. However, poorly coded third-party add-ons can cause buffering, crashes, and slow navigation. Always install add-ons from reputable developers.
Can I disable “Unknown sources” after installing add-ons?
Yes, and it’s recommended. Once you’ve installed all desired add-ons, you can toggle “Unknown sources” back to OFF. Your installed add-ons will continue to work normally. This prevents accidental installations from untrusted sources.
Why can’t I find the “Unknown sources” option in my Kodi settings?
There are two common reasons:
- Settings level is set to “Basic”: Change it to “Expert” — look for the Settings level indicator at the bottom-left corner of the Settings screen.
- You’re looking in the wrong place: Navigate to Settings → System → Add-ons.
Does this guide work for Kodi 22 “Piers”?
Yes—the navigation path is identical: Settings → System → Add-ons → Unknown sources. The setting remains in the same location across all modern Kodi versions (v19 through v22 Beta 1). Confirmed by Kodi community forum posts.
What’s the difference between “Unknown sources” and “Install Unknown Apps” on Firestick?
- “Unknown sources” is a Kodi-internal setting that allows Kodi to install add-ons from third-party repositories.
- “Install Unknown Apps” (or “Apps from Unknown Sources”) is a Firestick system-level setting that allows the Firestick OS to install APK files from outside the Amazon Appstore.
Both must be enabled to install third-party add-ons on Firestick devices.
What happens if I install a malicious Kodi add-on?
Malicious add-ons can:
- Mine cryptocurrency using your device’s resources (slowing down your device)
- Steal your personal data and login credentials
- Display intrusive ads or redirect you to malicious websites
- Install additional malware without your knowledge
Always research an add-on before installing it. Check community forums, read reviews, and verify the source. Our trusted add-on recommendations are thoroughly vetted.
Is Kodi itself legal?
Yes—Kodi is a completely legal open-source media player. The legality issue arises only when users install third-party add-ons that stream copyrighted content without authorization. Kodi does not condone piracy, and the Kodi team actively bans add-ons that violate copyright.
Do I need a VPN to use Kodi with third-party add-ons?
Strongly recommended. When you use third-party add-ons, your IP address is exposed to the streaming sources and your ISP can see your activity. A VPN:
- Hides your IP address
- Encrypts your internet traffic
- Prevents ISP throttling
- Protects your privacy
Many Kodi guides recommend ExpressVPN or Surfshark for this purpose.
Enabling “installation from unknown sources” is a simple, 60-second process that unlocks the full potential of Kodi by allowing you to install third-party add-ons and builds. However, with great power comes great responsibility—always exercise caution when installing add-ons from outside the official repository.
Quick Recap:
- Open Kodi → Click the gear icon
- Select System → Add-ons
- Toggle Unknown sources → ON
- Click Yes on the warning
- (Firestick users) Also enable Apps from Unknown Sources in Firestick Developer Options
- Use a VPN to protect your privacy. Compare the best VPNs for Kodi to stay secure.
- Only install from trusted sources—our curated Kodi addon list is a great starting point.
- Disable Unknown Sources after installation for extra security
Remember: Kodi is a powerful, flexible media center. Use it wisely, stay safe, and enjoy the content.
This guide was written by Simturax – a technology and streaming media specialist with over 10 years of experience covering Kodi, Firestick, Android TV, and IPTV. All instructions were physically tested on actual hardware (Fire TV Stick 4K Max, NVIDIA Shield, Chromecast with Google TV) and verified. We prioritize accuracy, transparency, and user safety above all else.