Google Cloud is entering the institutional crypto custody market with a new security service designed to help banks and financial firms protect digital assets. The product, called Google Multi-Party Compute (MPC), allows institutions to approve cryptocurrency transactions without storing a complete private key in one place.
Google showcased the service at its digital assets symposium in New York on October 28, 2026. The platform remains in private preview, with commercial availability planned for early 2027. Several financial institutions and other partners are testing the technology, although Google has not named them publicly.
The move comes as banks explore crypto custody, blockchain payments and tokenised assets. These services require strong security controls because blockchain transactions are generally difficult to reverse once completed.
How Google’s MPC Crypto Custody Service Works
Google’s MPC service uses multi-party computation to distribute control of cryptographic signing keys across separate environments. This reduces the risk of a single compromised system exposing an entire private key.
For example, a bank could keep one key share on its own hardware, another in Google Cloud and a third with a different cloud provider. The parties then work together to approve and sign a transaction without assembling the complete private key in one location.
Google says its system uses threshold signing. This means a predefined number of participants must take part before a transaction can receive a valid signature.
As a result, an attacker who compromises fewer participants than the required threshold cannot use those compromised shares alone to reconstruct the key or forge a signature. However, the overall security still depends on how institutions configure the system and protect their signing participants.
Google Adds Transaction Rules and Approval Controls
Beyond key protection, Google MPC includes tools that help institutions manage how digital assets move.
Financial firms can set transaction rules, including spending limits, approved destination addresses and requirements for multiple signers. These controls can help treasury teams manage transfers and reduce the risk of unauthorised transactions.
The service also uses Google’s Confidential Space technology, which provides hardware-isolated computing environments for sensitive operations.
However, automated policy decisions do not necessarily prevent every unauthorised transfer. Google’s documentation explains that a policy verdict guides signers, but enough authorised signers may still approve a transaction that a policy rule has denied.
Therefore, institutions must combine the technology with effective internal controls, clear approval procedures and careful management of user permissions.
Alphabet Is Already Using Google MPC for Digital Assets
Google’s parent company, Alphabet, has begun using the system to secure its own digital assets on Ethereum and Solana, according to CoinDesk.
However, Alphabet has not disclosed which assets it holds through the service or their value. Google has also not identified the financial institutions currently testing the product.
The company’s documentation lists support for the ECDSA signing algorithm used by Bitcoin, Ethereum and other EVM-compatible blockchains. Support for the Ed25519 algorithm used by Solana is listed as coming soon in the documentation.
Google has not announced pricing for the service. Its planned early 2027 commercial release will provide a clearer picture of how it intends to serve institutional customers.
Google Faces Competition in Institutional Crypto Security
Google is entering a market already served by specialist digital asset security providers, including Fireblocks, BitGo and Fordefi.
These companies offer technology that helps institutions secure digital assets, approve blockchain transactions and manage operational risks. Google’s new service brings similar capabilities into its cloud infrastructure.
Its approach also allows institutions to distribute key shares across different environments. This could appeal to banks that want to use cloud technology without giving one provider complete control over their transaction-signing credentials.
Still, Google’s entry does not remove the need for institutions to assess third-party risks. Firms must consider the security of their cloud providers, the reliability of their systems and the possibility of mistakes in transaction policies or approval processes.
The product’s success will depend on whether institutions find its security model, governance features and operational performance suitable for their needs.
You may also like : Japan’s PM Urges Urgent PHP Patch as Critical Flaws Trigger Website Shutdowns
Institutional Crypto Custody Demand Continues to Grow
Google’s move reflects broader interest in infrastructure for digital assets and tokenisation. Banks and financial firms are exploring ways to hold cryptocurrencies, manage tokenised assets and support blockchain-based financial services.
However, these activities require more than access to blockchain networks. Institutions also need secure transaction signing, clear approval procedures and reliable recovery options.
Google MPC aims to bring these capabilities together in a service built for institutional use. Its distributed-key approach is designed to reduce single points of failure while allowing firms to retain control over their approval processes.
For now, the product remains in private preview. Its planned commercial release in early 2027 will be an important next step as Google seeks to establish a position in institutional crypto custody infrastructure.
4 Comments
Institutional adoption keeps growing.
Security is a major priority.
Interesting move by Google.
Crypto infrastructure is evolving.