diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 8355c4a22..f44e5c3d1 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -60,6 +60,7 @@
         android:name="android.permission.QUERY_ALL_PACKAGES"
         tools:ignore="QueryAllPackagesPermission" />
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
+    <uses-permission android:name="android.permission.ENFORCE_UPDATE_OWNERSHIP" />
 
     <application
         android:name=".FDroidApp"
diff --git a/app/src/main/java/org/fdroid/fdroid/installer/SessionInstallManager.java b/app/src/main/java/org/fdroid/fdroid/installer/SessionInstallManager.java
index 17c0de998..ffa6f5a4f 100644
--- a/app/src/main/java/org/fdroid/fdroid/installer/SessionInstallManager.java
+++ b/app/src/main/java/org/fdroid/fdroid/installer/SessionInstallManager.java
@@ -107,6 +107,14 @@ public class SessionInstallManager extends BroadcastReceiver {
         if (Build.VERSION.SDK_INT >= 33) {
             params.setPackageSource(PackageInstaller.PACKAGE_SOURCE_STORE);
         }
+        if (Build.VERSION.SDK_INT >= 34) {
+            // Once the update ownership enforcement is enabled,
+            // the other installers will need the user action to update the package
+            // even if the installers have been granted the INSTALL_PACKAGES permission.
+            // The update ownership enforcement can only be enabled on initial installation.
+            // Set this to true on package update is a no-op.
+            params.setRequestUpdateOwnership(true);
+        }
         return params;
     }