Google’s MPC Crypto Custody for Banks, Explained: How It Compares to Your Hardware Wallet

Disclosure: This article contains affiliate links. As an Amazon Associate, Daily Crypto Hub earns from qualifying purchases at no extra cost to you.

Google has stepped into crypto custody. At its first digital assets symposium in New York on October 28, the company previewed Google Multi-Party Compute (MPC), a service built to let banks and other financial institutions hold and move crypto without any single machine ever holding a complete private key. It is in private preview now, several unnamed financial institutions are testing it, and Google is targeting commercial availability in early 2027. Pricing has not been announced.

You will not be signing up for Google MPC yourself, because it is aimed at institutions. But the technology behind it, multi-party computation, is the same idea that sits inside a growing number of consumer “seedless” wallets and exchange custody setups. This guide explains what MPC is in plain English, what Google actually announced, how MPC compares with the hardware wallet and multisig setups many of our readers use, and how to decide which approach fits your own coins.

What Google Actually Announced

Based on reporting from the symposium and Google’s own documentation as described in coverage, here is what is confirmed so far:

• Split signing, not a single key. Signing authority is divided into “key shares” spread across separate systems. A transaction is only signed when enough of those shares cooperate.
• Configurable thresholds. Institutions can pick thresholds such as two-of-three or five-of-seven, meaning a set number of shares must take part for a signature to be produced.
• Shares can live in different places. Reports say shares can sit on a bank’s own hardware, in Google Cloud, with a different cloud provider, and even on users’ mobile devices, with signers organized into teams.
• A policy engine before every signature. Transfer limits, approved destination addresses and approval requirements are checked inside Google’s Confidential Space environment before anything is signed.
• Google says it cannot read the shares. According to coverage, Google states it cannot see key shares in plaintext, including shares stored on its own servers.
• Chains and algorithms. Alphabet already uses the technology to protect some of its own assets on Ethereum and Solana, though Google did not say which assets. At launch the service is reported to support the ECDSA and Ed25519 signature algorithms, the schemes used by Bitcoin and Ethereum (ECDSA) and Solana (Ed25519), with a stated path to upgrade to post-quantum cryptography later.
• The protocol. One report says Google’s documentation describes a hardened extension of DKLS23, a published threshold-signing protocol.

Before this, Google Cloud customers who wanted to custody crypto could use Key Management Service and Cloud HSM, but they had to build signing, policies and recovery on top themselves. Google MPC packages those pieces into one service.

What Is MPC, in Plain English?

Every crypto wallet comes down to a private key: a secret number that produces the signature authorizing a transaction. In a normal wallet, that key exists in one place, whether that is your phone, an exchange server or the secure chip in a hardware wallet. Whoever gets the key controls the coins.

Multi-party computation changes that. The key is never created or stored as one whole. Instead, several parties each generate and hold a mathematical share. When a transaction needs signing, the parties run a joint calculation that produces a valid signature, and at no point is the full key reassembled in any one place. To the blockchain, the result looks like an ordinary single-signature transaction.

The practical benefit is that an attacker who steals one share, or one server, gets nothing usable. They would need to compromise enough shares to meet the threshold, ideally sitting in different organizations, clouds or devices.

MPC vs. Multisig vs. a Single Hardware Wallet

These three setups often get lumped together, but they work differently:

• Single-key hardware wallet. One private key, generated and stored offline in a dedicated device, backed up by a seed phrase. Simple and fully self-custodied, but the seed phrase is a single point of failure: lose it and a broken device means lost coins; leak it and anyone can drain the wallet.
• Multisig. Several independent keys, each with its own seed, and the blockchain itself enforces that, say, two of three must sign. The rules are visible on-chain and work the same whichever wallet software you use. We walk through this setup in our 2-of-3 Bitcoin multisig guide.
• MPC. One key mathematically split into shares, with the threshold enforced by the signing software off-chain rather than by the blockchain. It works on chains that lack native multisig, transactions look normal on-chain, and shares can be refreshed without moving funds. The trade-off is that you depend on the provider’s software and protocol being implemented correctly, and recovery usually depends on the provider’s tools.

For an institution juggling many chains, staff approvals and compliance rules, MPC’s flexibility is a big draw, which is why it has become common in institutional custody. For an individual, the main question is who holds the shares. If a company holds enough of them to sign on its own, that is closer to custody than self-custody, no matter how advanced the cryptography is.

What This Means for You

Google MPC is an institutional product, so it does not change how you should store your own coins today. It matters for three reasons:

1. Banks are getting serious infrastructure. A major cloud provider packaging custody for banks makes it easier for traditional institutions to offer crypto services. That could mean more bank-offered crypto accounts in the coming years, which are custodial by definition.
2. “MPC” will show up in more marketing. Expect more apps advertising “no seed phrase” MPC wallets. Some are genuinely self-custodial, where you control enough shares; others are not. Ask who holds which shares before trusting one with meaningful money.
3. The threat model is shifting. Coverage of the launch framed it as a response to key theft and AI-driven fraud. The same pressures apply to individuals: phishing, fake support agents and malware remain the most common ways people lose crypto, and none of them are solved by better cryptography alone. As we argued in our piece on AI risk to wallet cryptography, calm preparation beats panic.

If you are unsure whether your current setup is right for the amount you hold, our free Exchange vs Hot Wallet vs Cold Wallet checker walks you through the decision in a couple of minutes.

How to Borrow the Best Ideas From Institutional Custody

You do not need Google’s infrastructure to apply the same principles at home. The core idea of MPC and multisig is simple: no single stolen item should be enough to lose your coins, and no single lost item should be enough to lock you out. Here is a practical checklist.

1. Keep your keys on dedicated hardware

For long-term holdings, a hardware wallet keeps keys off your internet-connected phone and computer. Well-known options include the Ledger Nano X (check current price on Amazon) and the Trezor Safe 5 (check current price on Amazon). Buying two different brands is also the easiest first step toward a multisig setup. Before you order, read our guide on how to buy a hardware wallet safely, because sealed packaging alone is not proof a device is untouched.

2. Split your risk the way institutions split shares

Institutions spread key shares across their own hardware and separate clouds. The home equivalent is keeping backups in separate physical locations, so a fire, flood or burglary at one place does not take everything. A 2-of-3 multisig takes this furthest, but even with a single wallet you can store your seed backup somewhere other than the device itself.

3. Make your backup survive disasters

Paper burns and fades. A stamped or engraved steel plate such as the Cryptosteel Capsule (check current price on Amazon) holds a seed phrase through heat and water damage. Run through our free Seed Phrase Backup Checklist to make sure your backup is complete and stored sensibly.

4. Add your own “policy engine”

Google checks transfer limits and approved destinations before signing. You can copy the spirit of that: keep only spending money on exchanges or hot wallets, use address whitelisting and withdrawal delays where your exchange offers them, and protect exchange and email logins with a physical security key like the YubiKey 5 NFC (check current price on Amazon) instead of SMS codes, which can be hijacked through SIM swaps.

5. Verify before you sign

No custody system protects you if you approve a malicious transaction. Always check the receiving address on your hardware wallet’s own screen, and never type a seed phrase into a website, app or “support” chat.

What to Watch Next

• Named partners. Google has not said which banks are testing the service. Announcements of named institutions would show how quickly it moves from preview to real deployments.
• The early-2027 launch. Watch for confirmed pricing, the list of supported chains at launch, and whether Solana support is fully live, since coverage was not entirely consistent on that point.
• Post-quantum upgrades. Reports say the service is designed to be upgraded to post-quantum signatures later, but the launch algorithms are today’s standard ECDSA and Ed25519. Any concrete post-quantum timeline would be notable for the whole industry.
• Competitive response. Other cloud providers and existing custody specialists already offer MPC-based products, so expect pricing and feature moves as banks compare options.

Frequently Asked Questions

What is Google Multi-Party Compute?

It is a crypto custody service from Google for banks and financial institutions that splits signing authority into key shares held on separate systems, so no single machine holds a full private key. It is in private preview, with commercial availability targeted for early 2027.

Can individuals use Google MPC to store their crypto?

Not directly. It is aimed at institutions. Individuals could eventually encounter it indirectly if a bank or service they use builds crypto custody on top of it, in which case the institution, not you, would control the funds.

Is an MPC wallet safer than a hardware wallet?

It depends on who holds the shares and how the software is built. MPC removes the single point of failure of one key, but it relies on correct protocol implementation and usually on the provider’s recovery tools. A hardware wallet with a well-protected backup, or a multisig made of hardware wallets, keeps you in full control without depending on any company.

What is the difference between MPC and multisig?

Multisig uses several independent keys, and the blockchain enforces how many must sign. MPC uses one key split into shares, and the threshold is enforced by the signing software off-chain. MPC transactions look like normal single-signature transactions on-chain and work on blockchains without native multisig.

Does Google MPC protect against quantum computers?

Not at launch, according to reports. It is expected to use standard ECDSA and Ed25519 signatures, with Google describing a path to upgrade to post-quantum cryptography later.

This article is for informational purposes only and does not constitute financial advice.