# Unmanaged, managed and unlocked packages

*Platform App Builder Study Guide · App Deployment · Last updated October 25, 2026 · https://www.certifyforce.com/study-guide/platform-app-builder/app-deployment/unmanaged-managed-and-unlocked-packages*

When to use an unmanaged, managed (1GP or 2GP), unlocked or org-dependent unlocked package, and what happens to profiles, permission sets, customizations and data when a package is installed, upgraded or uninstalled.

- Certification: Salesforce Platform App Builder
- Exam section: App Deployment
- Study guide: https://www.certifyforce.com/study-guide/platform-app-builder

**Official exam objective:**

> Describe the use cases and considerations when using unmanaged and managed packages.

## What the exam expects

- Choose unmanaged, managed, unlocked or org-dependent unlocked packaging from who receives the app and whether it needs upgrades.
- Explain why packages are not the tool for moving your own sandbox changes to production.
- Contrast managed 1GP and 2GP: source of truth, namespaces, CLI automation, versioning.
- Predict what an upgrade does to profile settings and packaged permission sets.
- Predict what an uninstall removes, what blocks it, and how Apex tests behave at install.

Key terms: **unmanaged package** (a one-time, editable copy of components); **managed package** (provider-controlled, namespaced and upgradeable); **unlocked package** (a source-driven container for your own metadata); **org-dependent unlocked package** (an unlocked package validated against the installation org's metadata); **namespace** (the prefix on a managed package's uniquely named components).

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Unmanaged after install | Editable; the publisher can't change or upgrade them | [Unmanaged Packages](https://developer.salesforce.com/docs/platform/pkg1-dev/guide/packaging-developing-unmanaged.html) |
| Sandbox to production | Don't use unmanaged packages; use VS Code extensions or change sets | [Unmanaged Packages](https://developer.salesforce.com/docs/platform/pkg1-dev/guide/packaging-developing-unmanaged.html) |
| Upgrades | Supported for managed packages only | [Upgrade Your Managed Package](https://help.salesforce.com/s/articleView?id=xcloud.distribution_upgrading_packages.htm&type=5) |
| 2GP namespaces | Multiple packages can share one; 1GP is one package per namespace | [1GP vs 2GP](https://developer.salesforce.com/docs/platform/pkg2-dev/guide/sfdx-dev-dev2gp-comparison.html) |
| 2GP automation | All packaging operations via Salesforce CLI | [1GP vs 2GP](https://developer.salesforce.com/docs/platform/pkg2-dev/guide/sfdx-dev-dev2gp-comparison.html) |
| Internal apps | Unlocked packages are especially suited | [Unlocked Packages](https://developer.salesforce.com/docs/platform/sfdx-dev/guide/sfdx-dev-unlocked-pkg-intro.html) |
| Org-dependent validation | At installation, not version creation | [Org-Dependent Unlocked](https://developer.salesforce.com/docs/platform/sfdx-dev/guide/sfdx-dev-unlocked-pkg-org-dependent.html) |
| Profile settings on upgrade | Not upgraded; update manually | [Upgrade Your Managed Package](https://help.salesforce.com/s/articleView?id=xcloud.distribution_upgrading_packages.htm&type=5) |
| Packaged permission sets | Not editable; clone or create your own | [Install a Managed Package](https://help.salesforce.com/s/articleView?language=en_US&id=sf.distribution_installing_packages.htm&type=5) |
| Apex at install | Package tests and all org tests run; can install despite failures | [Install a Managed Package](https://help.salesforce.com/s/articleView?language=en_US&id=sf.distribution_installing_packages.htm&type=5) |
| Uninstall export | Emailed link; file deleted two days after uninstall | [Uninstall a Managed Package](https://help.salesforce.com/s/articleView?language=en_US&id=sf.distribution_uninstalling_packages.htm&type=5) |

## Check yourself

- Why can't you edit a permission set that arrives in a managed package, and what can you do instead?
- When you uninstall an unlocked package, what happens to deprecated components it once held?
- Why does an installer's API access stay in the admin's hands after an upgrade?
- What is the source of truth for a first-generation managed package?

## Sources

- [Developing and Distributing Unmanaged Packages](https://developer.salesforce.com/docs/platform/pkg1-dev/guide/packaging-developing-unmanaged.html)
- [Comparison of First- and Second-Generation Managed Packages](https://developer.salesforce.com/docs/platform/pkg2-dev/guide/sfdx-dev-dev2gp-comparison.html)
- [Unlocked Packages](https://developer.salesforce.com/docs/platform/sfdx-dev/guide/sfdx-dev-unlocked-pkg-intro.html)
- [Create Org-Dependent Unlocked Packages](https://developer.salesforce.com/docs/platform/sfdx-dev/guide/sfdx-dev-unlocked-pkg-org-dependent.html)
- [Upgrade Your Managed Package](https://help.salesforce.com/s/articleView?id=xcloud.distribution_upgrading_packages.htm&type=5)
- [Install a Managed Package](https://help.salesforce.com/s/articleView?language=en_US&id=sf.distribution_installing_packages.htm&type=5)
- [Uninstall a Managed Package](https://help.salesforce.com/s/articleView?language=en_US&id=sf.distribution_uninstalling_packages.htm&type=5)
- [Installing Packages (Application Installation Guide)](https://developer.salesforce.com/docs/platform/appexchange-install-guide/guide/appexchange-install-installation.html)
- [Deploy Your Changes](https://help.salesforce.com/s/articleView?language=en_US&id=platform.deploy_overview.htm&type=5)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 10 linked practice questions, and unlimited timed mock exams are included with the Platform App Builder pack (USD $19): https://www.certifyforce.com/practice-exams