Google is preparing to bring a new cryptocurrency security service to banks and other financial institutions as the industry looks for better ways to protect digital assets from theft.
The service, called Google Multi-Party Compute (MPC), distributes control of private keys across multiple systems instead of keeping the complete key in one location. It also allows institutions to apply transaction rules before approving and signing transfers.
Google’s move comes as private-key compromises remain a major source of cryptocurrency theft. Blockchain analytics firm Chainalysis reported that compromised private keys accounted for 43.8% of the cryptocurrency stolen in 2024. The company estimated that approximately $2.2 billion in cryptocurrency was stolen during the year.
According to a report, Google MPC is currently in private preview, with several major financial institutions testing the technology. Alphabet, Google’s parent company, is also using it to secure some of its digital assets on Ethereum and Solana.
Google is targeting a commercial launch in early 2027. It has not announced pricing or identified the financial institutions participating in the preview.
How Google’s MPC security system works
A cryptocurrency private key is a cryptographic credential that authorizes transactions from a wallet. Anyone who obtains sufficient control over that key may be able to transfer the assets associated with it.
Traditional approaches that concentrate key material in one place can create a single point of failure. If an attacker compromises that location, the security of the assets may be at risk.
Google MPC is designed to reduce that exposure by distributing key control across separate systems.
Rather than storing a complete private key on one machine, the system divides its control into cryptographic shares. The participating systems work together to sign an authorized transaction without assembling the full private key in one location.
An institution can also establish rules that determine which transactions are allowed and how many participants must take part in authorization. For example, a bank could require cooperation from multiple key-share holders before a transfer is signed.
The system checks transactions against these predefined controls before signing. This creates an additional layer of protection if an attacker compromises one server, device or set of credentials.
However, MPC does not make cryptocurrency wallets immune to attacks. Poorly configured approval rules, compromised participants, software vulnerabilities and collusion can still create risks. Its primary benefit is reducing reliance on a single system or credential to protect funds.
Why private-key security matters
The problem Google is addressing is already well documented.
In its 2025 Crypto Crime Report, Chainalysis found that private-key compromises accounted for 43.8% of cryptocurrency stolen in 2024.
The figure highlights the importance of protecting the credentials that authorize blockchain transactions, particularly for exchanges, custodians and financial institutions managing substantial digital-asset holdings.
Unlike many conventional financial transfers, completed blockchain transactions generally cannot simply be reversed by a bank or payment provider. Recovering stolen cryptocurrency can therefore be difficult, even when investigators identify the destination of the funds.
For financial institutions, the consequences of a compromised key can extend beyond the immediate loss of assets. A breach may also affect customer confidence, operational continuity and regulatory obligations.
Google MPC is intended to help institutions strengthen this part of their security infrastructure by distributing signing authority and introducing transaction controls.
Alphabet is already using the technology
Google is not presenting MPC solely as a technology for prospective customers.
According to CoinDesk, Alphabet has begun using the system to secure some of its own digital assets on the Ethereum and Solana blockchains.
The company has not disclosed which assets it is protecting or how much cryptocurrency is covered by the system.
Several major financial institutions and design partners are also testing Google MPC in its private-preview phase. Their identities have not been publicly disclosed in the reporting available as of October 28, 2026.
The service is designed for institutional use rather than as a consumer wallet application. Its intended customers include financial institutions that need to hold and transfer cryptocurrencies or tokenized assets while maintaining controls over transaction authorization.
Google has existing cloud-based security products, including Key Management Service and Cloud HSM, but the new offering is positioned as a dedicated MPC service for digital-asset custody and transaction signing.
The commercial launch is planned for early 2027, although pricing and final availability details remain unannounced.
Google is planning for post-quantum security
The company is also considering how future advances in quantum computing could affect cryptographic security.
Many blockchain systems rely on cryptographic techniques that could face new risks if sufficiently powerful quantum computers become available. Researchers and technology companies are therefore working on post-quantum cryptography designed to withstand attacks from quantum computers.
Google plans to support future post-quantum security upgrades for its MPC service. However, this is a planned capability, not a feature that should be assumed to be available in the current private preview. No specific release date for those upgrades has been announced.
It is also important to distinguish between the threats the service addresses today and future quantum-related risks. Distributing key control and checking transaction authorization can help reduce certain custody vulnerabilities, but they do not by themselves make every cryptographic algorithm quantum-resistant.
What Google’s move means for institutional crypto adoption
Banks and other financial institutions exploring digital assets need custody systems that can meet their security and operational requirements.
This includes protecting private keys, defining who can authorize transfers, monitoring transactions and ensuring that sensitive operations follow internal policies.
Google MPC could give institutions another option for building these controls without having to assemble every component of a custody and signing system themselves.
Its wider significance is the entry of a major cloud technology provider into a market where institutions need to manage blockchain-based assets under strict security requirements. The service also places Google alongside established digital-asset security providers that offer institutional custody and MPC-based transaction authorization.
Still, the announcement does not mean banks are adopting the service at scale. The product remains in private preview, the participating institutions have not been named, and commercial pricing is not yet available.
The system’s effectiveness will depend on its implementation, how institutions configure authorization policies and how it performs against real-world attacks.
For now, Google is positioning MPC as a way to reduce the risk that a single compromised system exposes an institution’s digital assets. With commercial availability targeted for early 2027, the next important milestones will be the product’s wider release, independent security assessments and evidence of adoption by financial institutions.