A manifest file is a list that tells your device what's inside an process or package, what permissions it needs, and how to run it
Think of a manifest file as an instruction card that comes with a piece of furniture. Just as the card tells you what parts are in the box and how they fit together, a manifest file tells your operating system what components make up an app, what it's allowed to do, and what it requires to work properly. Your device reads this file before and during installation to make sure everything is in order.
The most common manifest file you'll encounter is AndroidManifest.xml on Android phones and tablets. On Windows computers, you might see manifest files with names like app.manifest. On Apple devices, the equivalent information is stored in a file called Info.plist. Each operating system uses its own format, but they all serve the same purpose: they're the app's way of introducing itself to your device.
Key Takeaways
- A manifest file lists what an app contains, what hardware it needs, and what permissions it requires from you.
- Android apps use AndroidManifest.xml, Windows apps use app.manifest, and Apple devices use Info.plist to store this information.
- Your device reads the manifest before installing an app to check that all required components are present and that the app won't break anything.
- When you see a permission request during app installation — like "this app wants access to your camera" — that permission is defined in the manifest file.
What information a manifest file actually contains
A manifest file lists the app's name, version number, and the minimum version of the operating system it needs to run. It also declares every permission the app is requesting — access to your camera, microphone, location, contacts, photos, or storage. This is why you see those permission pop-ups when you install something new; your device is reading the manifest and asking you to approve what the app wants to do.
The manifest also specifies what hardware features the app needs. For example, if an app requires a camera to function, the manifest says so. This prevents you from installing an app on a device that doesn't have what it needs. The file also lists the app's main activities — the screens and functions that make up the user experience — and tells the system which one to open first when you tap the app icon.
On Android, the manifest declares what services the app runs in the background, what broadcast receivers it listens for (notifications, for example), and what content providers it uses to share data with other apps. All of this information is packed into one XML file that your phone reads when ready.
Why your device checks the manifest before installing anything
Your operating system uses the manifest to decide whether an app is safe to install and whether it will actually work on your device. If the manifest says the app needs Android 12 or newer and you have Android 11, your device will refuse to install it. If the manifest requests a permission that conflicts with your device's security rules, the system flags it.
The manifest also prevents apps from pretending to be something they're not. An app can't claim to be a calculator when it's actually a game, because the manifest declares its true identity and purpose. This is one reason why sideloading apps (installing them from outside the official app store) can be risky — if the manifest has been tampered with, your device might not catch a malicious app until it's too late.
How the manifest affects what you see during installation
When you read an app from the Google Play Store, Apple App Store, or Microsoft Store, the store reads the manifest before showing you the permission request screen. The list of permissions you see — "this app wants access to your location," "this app wants to read your messages" — comes directly from the manifest file. You're not seeing a summary; you're seeing the actual permissions the developer declared.
If an app requests unusual permissions, that's a warning sign. A flashlight app shouldn't need access to your contacts or location. A weather app shouldn't need permission to make phone calls. The manifest makes these mismatches visible, which is why checking the permission list before installing is a good habit.
The difference between what the manifest says and what an app actually does
A manifest file is honest about what an app is allowed to do, but it doesn't may provide that's all an app will do. A developer could request permission to access your photos and then use that access to upload them to a server without your knowledge. The manifest declares the capability; it doesn't enforce how the app uses it.
This is why the official app stores (Google Play, Apple App Store, Microsoft Store) scan apps for suspicious behavior before they're published. They're looking for apps that request permissions they don't actually need, or that use permissions in ways that don't match the app's stated purpose. The manifest is the first line of defense, but not the only one.
What happens if a manifest file is missing or corrupted
If an app's manifest file is missing or damaged, your device usually won't install it at all. You'll see an error message saying the app is corrupted or can't be installed. This is actually a safety feature — your device is refusing to run an app it can't verify.
If you're sideloading an app (installing it directly from a file rather than an app store), a missing or corrupted manifest is a major red flag. It means you have no way to know what the app is asking permission to do, and your device can't verify that it's safe. This is one reason why sideloading is riskier than using official app stores.
Manifest files on different devices and systems
Android devices use AndroidManifest.xml, which is a plain-text file written in XML format. You can actually open and read one if you extract an Android app file (APK) on a computer, though most people never need to. Windows applications use app.manifest files, which serve a similar purpose but are formatted differently. Apple's Info.plist file contains the same kind of information but uses Apple's property list format.
Web applications don't use manifest files in the same way, but they do use a manifest.json file to declare what the app needs and how it should behave when installed as a progressive web app. The concept is the same across all platforms: the manifest is the app's way of telling your device what it is and what it needs.
Frequently Asked Questions
Can I edit a manifest file to change what an app does?
You can edit the text in a manifest file, but the changes won't take effect unless you repackage the entire app and sign it with a valid certificate. Most people can't do this without specialized tools. Even if you could, modifying an app's manifest without the developer's permission violates copyright law in most places.
Why does an app ask for permissions I don't think it needs?
Developers sometimes request permissions broadly to cover features they might add later, or because a library they're using requires certain permissions even if the app doesn't use them. You can usually deny permissions and see if the app still works — many apps function fine without every permission they request.
Is it safe to install an app if I don't recognize some of the permissions it's asking for?
Look up the app's reviews and check what it actually does. If a weather app is asking for permission to access your contacts, that's suspicious. If a photo editor is asking for storage access, that makes sense. When in doubt, don't install it — there are usually alternatives that request fewer permissions.
What does it mean if an app doesn't have a manifest file?
On Android, an app without a manifest file won't install at all. Your device will show an error. On other systems, the app might install but your device won't know what it needs or what it's allowed to do, which is a serious security problem. This is why sideloading apps from unknown sources is risky.
Do I need to do anything with manifest files myself?
No. Your device handles manifest files automatically. You'll never need to open one, edit one, or think about one unless you're a developer building an app. They work entirely behind the scenes.