API 23: The Milestone Android Release That Changed Mobile Security Forever

When developers talk about the history of Android, certain version numbers carry legendary status. Among them, API 23—better known as Android 6.0 Marshmallow, released back in late 2015—stands out as one of the most consequential updates in the platform’s history.

While it might feel like ancient history in the fast-paced world of mobile tech, API 23 fundamentally reshaped how users interact with their phones, how apps request data, and what developers must consider when building secure software.

Why API 23 Was a Paradigm Shift

Before Marshmallow, the Android ecosystem operated on an “all-or-nothing” permission model. When a user downloaded an app from the Google Play Store, a giant list of required permissions (contacts, location, camera, storage) was displayed upfront. Users had to accept all of them just to install the app. If you didn’t want a simple flashlight app accessing your contacts, your only choice was not to install it.