Everyone at Church on Sundays expects Internet access. Members, visitors, volunteers and Staff members routinely use their mobile devices throughout the Church campus. A well-designed WiFi network should make that access convenient while protecting the Church’s administrative systems, financial information, staff computers, and technology infrastructure.

Patterns of Internet Use on Sundays

On a typical Sunday, dozens or even hundreds of devices may connect to the network using any of these patterns:

• Looking up Scripture: Worshipers use Bible apps and websites instead of, or alongside, their printed Bibles.
• Accessing Sunday School resources: Teachers use online Bible resources, videos, presentations, maps, and commentaries.
• Posting to social media: Members and visitors may post photographs, Scripture quotations, sermon comments, livestream links, or Church announcements to Facebook, Instagram, and other platforms.
• Church communications: Staff and volunteers update websites, send email, access cloud-based documents, or communicate through messaging services.
• Worship technology: Worship teams use Internet-connected computers for presentation software, music resources, livestreaming, video distribution, or other production functions.
• Online giving: Members use smartphones to make contributions through the Church’s online giving platform.
• Children and Youth Ministry: Ministry leaders use Internet resources for check-in systems, curriculum, videos, music, and activities.
• Visitors: Guests use WiFi because cellular coverage inside a large Church building can be unreliable.
• Accessibility: Worshipers use Internet-connected devices for hearing assistance, enlarged Scripture or worship materials, translation, or other accessibility services.

Providing Internet access therefore supports both the ministry of the Church and the expectations of the congregation, who are accustomed to continuous connectivity.

Security Issues With Public WiFi

Providing WiFi to the general public also creates security concerns. The fundamental problem is not that Church visitors should be considered untrustworthy. Rather, the Church generally has no control over the devices brought onto its campus.

A visitor’s smartphone, tablet, or computer could be infected with malware without the owner even knowing it. An improperly configured device could attempt to communicate with other devices on the same network. Someone could intentionally probe the network for printers, computers, cameras, file servers, or other equipment.

An unrestricted network can potentially expose:

• Staff computers and mobile devices
• Financial and accounting systems
• Contribution and donor information
• Membership databases
• Children’s ministry and check-in systems
• Network-connected printers
• Security cameras and access-control systems
• Worship and livestreaming equipment
• Network storage devices
• Building automation and other Internet-connected equipment

Churches often possess sensitive information, including contribution records, pastoral-care information, personnel records, children’s information, background-check documentation, and financial data. Public access therefore should never grant access to the same internal network used for Church business.

Another concern is bandwidth consumption. A small number of users streaming high-definition video, downloading large files, or even performing software updates can consume enough capacity to interfere with livestreaming or other mission-critical Sunday operations.

Staff WiFi: Advantages and Disadvantages of Locking It Down

A secured Staff WiFi network should normally be treated as part of the Church’s internal technology infrastructure.

Advantages

Security. Authentication prevents casual visitors from connecting directly to the staff network.

Protection of administrative resources. Internal computers, printers, servers, and other devices can be separated from public users.

Better accountability. Access can be limited to authorized staff and designated volunteers.

Reliable performance. Network administrators can prioritize business, worship, security, and livestreaming traffic.

Password management. Credentials can be changed when employees leave or when unauthorized access is suspected.

Reduced attack surface. Separating trusted and untrusted devices substantially reduces opportunities for unauthorized network access.

Disadvantages

A secured network requires administration. Passwords, Passkeys or other credentials must be maintained, authorized users must know how to connect, and occasionally devices must be reconfigured.

There can also be inconvenience when volunteers need temporary access. However, these disadvantages are primarily administrative and generally do not outweigh the security benefits.

Open Public WiFi: Advantages and Disadvantages

A separate public or Guest WiFi network can provide Internet service to members and visitors without giving them access to the Church’s internal systems.

Advantages

Convenience. Visitors can connect without requesting a staff password.

Hospitality. Free Internet access can be viewed as another service offered to people using the Church campus.

Support for worship. Members can access Scripture, sermon resources, Church websites, giving systems, and social media.

Support for ministries and events. Sunday School classes, community groups, meetings, weddings, funerals, and other events can have Internet access without using staff credentials.

Disadvantages

A completely open and unsecured WiFi network introduces several concerns.

Anyone within radio range may be able to connect, including individuals outside the building. The Church may have little knowledge of who is using the connection or what devices are connected.

Public users can also consume substantial bandwidth. Without proper network configuration, this could affect worship technology or livestream quality.

Most importantly, an open network becomes significantly more dangerous if it is not technically isolated from the Church’s internal network. Simply creating two WiFi names does not necessarily provide adequate security. The networks should be separated at the network infrastructure level.

Better Model: Separate Networks

The choice does not need to be between secure Staff WiFi and convenient Public WiFi. A properly designed Church network can provide both.

A Church should consider maintaining several logically separated networks:

Network	Typical Users	Access
Staff	Employees and authorized leadership	Internet + authorized internal resources
Worship/Production	Worship, AV and livestream systems	Restricted operational access
Guest/Public	Members, visitors and community users	Internet only
Facilities/Devices	Cameras, thermostats, access controls and other equipment	Only services required by those devices

This separation is commonly accomplished through network segmentation, such as VLANs, firewall rules, and separate wireless network identifiers (SSIDs).

The Guest network should not be able to initiate connections to the Staff, Worship, financial, security, or facilities networks.

Should Public WiFi Be Completely Open?

An “open” Guest network can be easy to use, but convenience does not require eliminating every security control.

The Church can provide a Guest WiFi network that is easy for visitors to access while still implementing safeguards behind the scenes. Depending upon the Church’s equipment and requirements, these can include:

• Client isolation so Guest devices cannot communicate directly with one another
• Firewall rules preventing Guest access to internal networks
• Bandwidth limits for individual Guest devices
• Separate bandwidth or Quality of Service (QoS) priorities for livestreaming and worship systems
• Appropriate content or security filtering
• Automatic expiration or periodic renewal of Guest connections
• A simple acceptable-use or welcome page
• Monitoring for abnormal network activity

A Guest password is another option. The password could be displayed in appropriate areas or provided by volunteers. This prevents completely anonymous drive-by access while imposing relatively little inconvenience on legitimate users.

Recommended Best Practices

The Church should adopt a segmented network architecture rather than treating all WiFi users as members of one network.

Recommended practices are:

1. Secure the Staff WiFi network. Staff access should require authentication and the credentials should not be distributed publicly.
2. Provide a separate Guest/Public WiFi network. Members and visitors should not need Staff credentials simply to access the Internet.
3. Isolate Guest users from internal resources. Public devices should have Internet access but should not be able to reach staff computers, financial systems, printers, security equipment, or other internal devices.
4. Protect worship-critical systems. Livestreaming, presentation, audio/video, and other essential Worship Center systems should be isolated or prioritized so heavy Guest usage cannot disrupt worship.
5. Separate specialized devices where practical. Security cameras, door controls, thermostats, building systems, and other Internet-connected devices should not automatically reside on the Staff or Guest network.
6. Use modern wireless security. Staff and operational networks should use currently supported encryption and authentication rather than obsolete WiFi security standards.
7. Maintain network equipment. Wireless access points, firewalls, switches, and related equipment should receive firmware and security updates.
8. Change credentials when necessary. Staff passwords and administrative credentials should be changed when compromised, broadly distributed, or affected by personnel changes.
9. Limit administrative privileges. Only designated individuals or technology providers should have administrative access to routers, firewalls, switches, and wireless controllers.
10. Document the network. The Church should maintain an inventory of major network equipment, WiFi networks, responsible administrators, configuration backups, and procedures for responding to failures or security incidents.

Conclusion

Internet access is now part of the infrastructure supporting worship, education, administration, communication, giving, and hospitality. The goal should therefore not be to choose between security and public access, but to design the network so that both can coexist.

The preferred approach is to maintain a secured Staff network and a separate, isolated Guest network, with additional separation for worship-production, security, and building systems where appropriate. The Guest network can remain simple and convenient for members and visitors while firewall rules and network segmentation prevent those devices from accessing sensitive Church resources.

This approach allows a Church to offer Internet access as a ministry and hospitality resource without unnecessarily exposing its administrative, financial, worship, security, and facilities infrastructure.

Lots of businesses are adopting Artificial Intelligence (AI) in their quest to embrace the latest software. Churches should also be using this technology, just like they use video, web and office technology. But a lot of Churches seem to be reacting to the fears that AI will cause disruption, rather than trying to use this new technology.

Pastors can use AI to create sermon resources like study guides for social media postings. Staff can use AI to better understand their metrics. For example, analyze the attendance data from the last 5 years and identify the trends that explain the highs and lows. Did attendance go up because of the event title, or because there were less conflicts with community activities? Staff can also use AI to personalize their messaging, to reach more people where they are. It can remember all of the events in people’s lives and add a personal note.

Some will say that AI is evil; but like all technology, it depends upon how it is used. The Church needs to use this new tool well, with thought given to Christian Ethics and sharing the truth of God’s Word. The Church can thus lead by example as we all deal with this new technology. It has the potential to a lot of good in ministry.

Many Churches are using Live Streaming to share the worship service over the Internet. The recent pandemic made this a necessity for a while. Now, people are returning to the worship space for in-person worship. However, there are other ways to use the technology.

Churches can produce Pod Casts on various topics. This could be as simple as a Bible Study with the pastor. Or it could be a group discussion on some current issue. Either way, the pod cast is linked into the Web Site, where it can be downloaded and played by anyone. This is another way to share the Good News. It involves minimum hardware and software. And you probably already have it with the Live Streaming technology.

Most Churches have added Social Networking sites through some group starting a facebook page. Maybe it was the youth group that came up with that idea, because the youth minister wanted to share pictures from the youth retreat. Or maybe it was the women’s group that wanted to share video clips from a women’s event via instagram. Or maybe it was a men’s group that wanted to coordinate the BBQ cookout via twitter. Whatever the source, the Social Networking sites just sort of sprung up by themselves, with little if any coordination with the Church staff. That’s okay. It’s creative, and it met an immediate need by these groups to communicate.

If you look at how the Church communicates overall with the community of believers, then you might perceive a problem here, though. The Church is stronger when it speaks with one voice to the community. If you have many voices saying different things, then it gets confusing and is less effective. Suppose the women’s event is scheduled on the Church calendar for Friday night at 7:00 PM in Room 300. The Church bulletin announces it for that time and place. However, the organizers discover that they’ve got more people signed up than they anticipated – a great problem to have! So they decide to move the event to the Fellowship Hall at 6:00 PM. They announce the change at the last minute on instagram, which they expect all of the women to see. However, they don’t update the Church calendar. The consequence is that half of the women show up late and at the wrong room. Some are frustrated to find the room empty. Checking the Church calendar online confirms the information that they had in their personal calendar. So they conclude that the event was cancelled and go home. In other words, they miss out!

What is needed is more coordination. What if we started looking at all of those Social Networking sites as Branch Blogs – i.e. extensions to the Church’s web site. Information and updates would flow in both directions – i.e. from the Church Web Site to the Branch Blog, and from the Branch Blog to the Church Web Site. That way, communication is increased and the message of the Church is one voice on each subject. Why not simply assign staff to the task of coordinating with the editors of these various Social Networking sites. The Youth Minister would simply make sure that anything going onto the Youth facebook page also gets updated on the Church Web Site. And anything that the Youth Minister adds to the Church Web site for the youth also gets reported on the facebook page. This is likely already happening if the Youth Minister also edits the facebook page.

In summary, take time to think through the process of how do we coordinate between the various ministry groups and their related Social Networking sites. Identify the staff member or volunteer that needs to coordinate between the Church Web Site and the group. Make sure they also know who publishes the Social Networking site. Or, better yet, get them access to the Social Networking site so they can publish the information themselves. Social Networking is then another channel through which the Church spreads the Gospel Message. It will be more accurate, and more timely, if it is coordinated with the Church Web Site.

With the rise of Social Networking (Facebook, Twitter, FourSquare), Churches naturally want to establish a presence. But how do you avoid running into ethical and legal issues when you use social media? You can (and probably should) write a Social Media Policy, but you should also train your staff on how to avoid these issues. Here are some tips to consider:

• Always use good etiquette online, which will avoid a lot of issues
• Do not use the Church´s logo on your personal website, unless you get permission
• When you write your own opinion, but you´re a member of the staff, include a disclaimer
• Avoid legal entanglements – i.e. libel – by always speaking the truth

A disclaimer can be a simple postscript like “the views expressed are mine alone and do not necessarily reflect the views of the Church.” This validates your free speech, while noting the fact that you are not speaking for the Church in this context. Free speech issues in social networking settings are starting to appear before the courts.

Likewise, the tongue is a small part of the body, but it makes great boasts. Consider what a great forest is set on fire by a small spark.