Google Cloud’s preview of a new institutional crypto key‑security service is a development in the digital‑asset custody landscape, arriving at a moment when private‑key theft, operational lapses, and custodial vulnerabilities continue to undermine confidence in institutional crypto adoption.
Google Cloud has documented a Multi‑Party Compute (MPC) service designed to strengthen key‑management practices for banks, asset managers, and regulated financial institutions.
The new service implicates Big Tech’s deepening involvement in crypto‑infrastructure security and reflects growing market demand for hardened custody solutions as digital‑asset risks escalate.
New Security Layer from Google Cloud
Google Cloud’s MPC service is currently in private preview, with documentation referencing its October 2026 API and migration path.
The service introduces threshold‑signing capabilities, enterprise governance controls, and policy‑enforcement mechanisms that allow institutions to define who can request, approve, and execute transactions.
The core innovation lies in how the system handles private keys. Instead of storing a complete private key in a single operational location, MPC divides signing authority among multiple independent participants.
Each participant holds a key share, and only when the required threshold of participants cooperates can a transaction be signed. Compromising fewer than the threshold should not give an attacker signing control.
The intended design directly addresses one of the most persistent risks in crypto custody: the single‑point‑of‑failure problem.
Private‑key theft has historically been the largest category of crypto losses, accounting for 43.8% of all stolen cryptocurrency in 2024, according to Chainalysis data.
Google Cloud’s MPC service aims to reduce that risk by ensuring that no single compromised device, insider, or system can expose a complete private key.
Why Google is Entering Crypto Custody Infrastructure
Google’s involvement in institutional crypto custody is not entirely new.
The company has previously supported MPC deployments through its Confidential Space infrastructure, which uses confidential computing and hardware‑backed attestation to verify sensitive workloads and restrict access to protected data.
However, the new MPC service represents Google’s first dedicated, purpose‑built crypto custody product, designed specifically for digital‑asset institutions rather than general cryptographic key management.
Media reports state that Alphabet is already using the technology internally to secure its own digital assets on Ethereum and Solana, underscoring that this is not merely a theoretical offering but a system Google itself relies on.
Commercial availability is expected in early 2027, with several major financial institutions already testing the platform.
The timing is notable as the crypto industry has seen billions of dollars lost to private‑key compromises, operational misconfigurations, and vulnerabilities in MPC libraries used by existing custody providers.
CERT/CC recently disclosed a flaw in Fireblocks’ MPC library that could weaken protections separating cryptographic key shares, highlighting the need for more robust institutional solutions.
Google’s entry into the space signals that institutional crypto custody is becoming a core component of modern financial infrastructure.
How Google’s MPC System Works
Google Cloud’s MPC service incorporates several key features designed to meet institutional requirements:
Threshold Signing
Transactions require cooperation among multiple key‑share holders. No single participant ever holds the full private key.
Isolated Hardware Environments
Key shares are stored in separate hardware environments, reducing the risk that a single compromised machine can expose sensitive data.
Policy Enforcement and Governance
Institutions can define rules such as spending limits, approved destination addresses, multi‑person authorization requirements, and transaction‑request permissions.
Blockchain Support
Google lists secp256k1 signing for Bitcoin and Ethereum‑style networks, with Ed25519 support for Solana coming soon.
Key Recovery and Migration
The system includes mechanisms for key‑share recovery and migration, allowing institutions to maintain continuity even if one participant’s environment becomes unavailable.
These features collectively aim to reduce operational risk, strengthen compliance controls, and provide institutions with a custody framework that aligns with regulatory expectations.
