Google has revealed an encryption security service plan aimed at distributing private key control across multiple independent computing environments, with the goal of commercialization by early 2027. As financial institutions seek stronger protection for digital assets, this service is currently in the private testing phase.

According to CoinDesk, Google Multi - Party Compute ( MPC ) is conducting private tests with several large financial institutions and will showcase the technology during the company's first digital assets seminar in New York. Alphabet, Google's parent company, has already begun using this technology to protect its own digital assets on Ethereum and Solana.

Meanwhile, the company has not yet announced the names of financial institutions participating in the testing, nor has it disclosed which assets Alphabet holds through this system. The pricing has also not been released, and the planned commercial launch depends on the completion of the preview project.

Google Launches MPC Security Solution for Institutional Encrypted Hosting

Google Multi - Party Compute uses encryption technology to split the control of private keys among multiple independent parties. Authorized parties can collaboratively sign blockchain transactions without needing to centralize the complete private keys in one location, thereby reducing reliance on a single device or administrator.

According to the architecture proposed by Google, institutions can distribute their signature shares among their own devices, Google Cloud, and other cloud service providers. Banks can set up approval rules involving two, three, or even five to seven parties before authorizing a transfer.

The service also includes transaction strategies for checking requests before the signing process begins. Institutions can limit recipient addresses, set transfer limits, or require additional approval; all these checks are performed within Google's Confidential Space environment.

Previously, in April 2023, Google released a technical guide explaining how organizations can use Confidential Space to build distributed signature systems. The product proposed this time integrates similar capabilities with signature strategies and recovery tools into a dedicated service.

Google's existing Cloud Key Management Service and Cloud HSM products are already capable of protecting encryption keys. The new service focuses specifically on the authorization and recovery needs of digital assets, as blockchain transactions, once completed, are usually irreversible.

Private key leakage highlights weaknesses in encryption infrastructure

As Google's planned services are set to be launched, the theft of credentials remains a persistent source of losses in the cryptocurrency sector. Chainalysis estimates that 43.8% of the cryptocurrencies stolen in 2024 were related to the leakage of private keys.

An incident involving Humanity Protocol in June this year showed that multi-signature credentials can also be exposed due to a compromised device. According to a report released by crypto.news after the investigation, attackers obtained 7 private keys from a developer's computer and used these keys to gain access to management control.

Stolen credentials enabled attackers to perform unauthorized transactions and contract modifications on Ethereum and BNB Smart Chain. Humanity Protocol indicates that the attack utilized valid signatures generated from the leaked keys, rather than any defects in the blockchain contracts themselves.

Google's approach is aimed at limiting the excessive concentration of such signing rights. However, its security still depends on how customers separate key shares, protect administrators, and manage approval policies.

An analysis in October regarding institutional crypto custody control pointed out that if multiple signing parties share the same management permissions or recovery systems, then even with decentralized credentials, operational risks cannot be eliminated.

Google enters a market dominated by professional hosting service providers

The service proposed to be launched will bring Google's cloud infrastructure closer to mature digital asset security service providers such as Fireblocks, Fordefi, and BitGo. Institutions are already using these specialized platforms to manage wallets, control transaction approvals, and record asset movements.

Google is targeting banks that wish to retain direct control over their hosting services while utilizing external technologies. This service will provide the necessary signing infrastructure without requiring financial institutions to transfer ownership of their private keys to Google.

In September, UniCredit is exploring digital asset custody and brokerage infrastructure, while European banks are also developing services related to cryptocurrencies and tokenized securities. Fireblocks has also provided wallet and tokenization technology to the Qivalis banking alliance.

Google has not yet disclosed the performance benchmarks of its proposed system compared to its existing commercial products. The identity of the testing partners remains confidential, therefore the scale of initial institutional participation is still unclear.

AI Threats Raise Questions About the Future Security of Wallets

To some extent, Google positions this service as a response to the increasingly powerful cyberattacks posed by AI tools. A Chainalysis report indicates that in 2025, fraud related to AI tool providers averaged a profit of $3.2 million per case, whereas fraud without such associations averaged a profit of $719,000 per case.

This comparison measures the profits of different types of scams, and it does not prove that AI led to higher losses, nor does it prove that MPC could have prevented these scams.

Ethereum researcher Justin Drake has warned that in the future, AI may make progress, thereby weakening the encryption assumptions that protect blockchain wallets. Currently, the publicly demonstrated AI system is not yet capable of deriving ordinary Bitcoin or Ethereum private keys by cracking the underlying signature algorithms.

Google stated that the service, once officially launched, will support ECDSA and Ed25519 signatures. Its architecture is also designed to be compatible with future post-quantum cryptography upgrades, although the company has not yet announced a timeline for incorporating these signature methods.

Apart from the time point of "early 2027," the company has not disclosed a more precise commercial release date, nor has it indicated which organization will be the first to adopt the service after the private testing phase is completed.