Bitcoin Self-Custody for Churches: A Practical Guide

In Luke 16, Jesus commended the dishonest manager not for his dishonesty but for his shrewdness — for thinking carefully about his situation and acting wisely in response to it. Then he drew the contrast that stings: "For the sons of this world are more shrewd in dealing with their own generation than the sons of light." The rebuke applies to the church's relationship with money today. Christians who are not thinking carefully about our monetary moment are leaving that rebuke unanswered.

Most churches define financial stewardship as a checking account at the local bank, reserves in a money market fund, and expenses paid through a debit card provider that could terminate the relationship tomorrow. That approach may no longer be adequate in a monetary environment defined by persistent inflation, growing institutional fragility, and the emerging willingness of financial platforms to target organizations for their ideology.

Why Bitcoin Deserves the Church's Attention

Our monetary system is broken in ways that directly threaten the church's mission. The Federal Reserve can expand the money supply at will, gradually eroding the value of every dollar your church holds in savings. Sound money has always required two properties: scarcity — it must be hard to create, so no one can dilute its value — and permissionlessness — it must be truly yours to use, without someone else's approval. Our current money fails both tests.

Governments and financial corporations are weaponizing control over bank accounts and payment networks. The deplatforming of Christian ministries — accounts frozen, payment processors terminated — is not a hypothetical. It is already happening. Bitcoin addresses these failures directly. Its total supply is fixed at 21 million units, mathematically enforced, with no central authority capable of inflating it away.

The Decision Is Only Half Made Without Self-Custody

Holding bitcoin is not like holding funds in a money market account. The monetary properties that make bitcoin worth holding — censorship resistance, protection against confiscation, independence from institutional failure — exist only in self-custody.

A church that holds bitcoin on an exchange does not actually hold bitcoin. It holds an IOU from the exchange — a promise to deliver bitcoin if and when the church asks for it. That promise is subject to exchange insolvency, hacking, mismanagement, regulatory freeze, and account closure at the platform's discretion.

What Self-Custody Actually Means

Your bitcoin is controlled by a private key — a cryptographic secret. That private key is encoded in a seed phrase: a sequence of 12 or 24 ordinary English words. Whoever holds the seed phrase controls the bitcoin. A hardware wallet is a physical device that stores the private key in secure hardware and signs transactions without ever exposing the key to an internet-connected computer.

In self-custody, the church holds the hardware device and the seed phrase backup. No institution holds a copy. This is what makes the bitcoin genuinely the church's — and genuinely protected from institutional interference.

Why Church Self-Custody Differs from Individual Self-Custody

A church is not a single person. It has multiple leaders, a governance structure, a treasurer, a finance committee — and any of these people may come and go. A custody architecture built around a single individual — one hardware device, one seed phrase, known to one person — is catastrophically misaligned with how a church actually operates.

Consider what single-signer custody looks like in practice: a hardware wallet held by the treasurer, the seed phrase known only to that individual. When that treasurer leaves the church, retires, or dies, what happens to the bitcoin? This is the most common failure mode for churches that hold bitcoin without having thought through their custody architecture. It is also entirely preventable.

The Right Architecture: Multisig

The appropriate custody architecture for a church is multisig (multi-signature): a setup that requires more than one key to authorize a transaction. The most common configurations are 2-of-3 (any two of three keyholders must sign) or 3-of-5 (any three of five must sign).

For a church, a well-implemented multisig arrangement provides three things that single-signer custody cannot:

• No single point of failure. No single lost, stolen, or inaccessible key compromises the funds. A treasurer who moves away, a pastor who dies unexpectedly, an elder who loses his hardware device — none of these events results in lost bitcoin.
• No single point of control. No individual can move the church's bitcoin unilaterally. The same principle that requires two signatures on a church check should govern bitcoin custody.
• Resilience across leadership transitions. When a keyholder leaves, the bitcoin can be moved to a new multisig address with an updated keyset — a straightforward on-chain transaction requiring only the existing quorum of signers.

Who Should Hold the Keys?

Key distribution in a church multisig should mirror the church's actual governance structure. Keys distributed among church officers is a natural fit. The principle is that custody authority should reside where governance authority already resides — not in a single individual by default or convenience.

Several rules should govern key distribution: keyholders should be geographically distributed; no single individual should hold more than one key; and consider whether at least one key should be held by an external trusted party — a bitcoin custody specialist, a bitcoin-aware attorney, or a trusted individual at a like-minded church — to provide recovery capability if multiple internal keyholders become unavailable at the same time.

Documentation

A multisig setup without documentation is not a complete custody solution. The church's custody documentation should answer every question an incoming officer or new treasurer would need answered:

• What is the multisig configuration and why?
• Where is each hardware device stored?
• Where is each seed phrase backup stored?
• What is the recovery procedure if one keyholder becomes unavailable?
• Who is responsible for onboarding new keyholders when leadership changes?

This documentation should be a formal church record — maintained alongside the church's financial records, accessible to the officers or their designated trustee.

The Succession Problem

Leadership transitions are a feature of church life, not an exception to it. The most dangerous moment in a church's bitcoin custody is a leadership transition without a custody handoff procedure. Without a documented process for how a departing keyholder passes responsibilities to a successor, the custody architecture degrades with every transition.

A properly designed church custody arrangement includes an explicit transition procedure: what triggers a key rotation, who is responsible for initiating it, how the incoming keyholder is onboarded and verified, and how the transition is recorded in the church's documentation.

Consistent Shrewdness

Holding bitcoin is a shrewd recognition of our monetary moment. Holding it properly — in a custody architecture that actually delivers what bitcoin promises, built for an institution that will outlast any individual keyholder — is the consistent conclusion of that shrewdness.