> For the complete documentation index, see [llms.txt](https://docs.zebec.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.zebec.io/zebec-application-suite/enterprise-payroll/treasury-operations/rotate-treasury-signers.md).

# Rotate treasury signers

Add or remove the people authorized to sign treasury wallet transactions.

The treasury wallet is a **multi-signature wallet**. Its **signers** are the people in your organization authorized not only to approve but also to sign treasury transactions: disbursements, payroll runs, and other operations that move funds.

Signer rotation is a **critical system operation**: from this screen an admin can add or remove signers.

![Enrolled approvers and company signer rotation](https://3427593773-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FYaTRWumFGJjYtG8IAVar%2Fuploads%2Fgit-blob-55995df1a09a1aad2a81fe526a880ae733641648%2Frotate-signers.png?alt=media)

## How rotation works

* Every rotation (adding **or** removing a signer) requires **two passkey approvals** to execute.
* A signer must be a team member with the **Admin** or **Finance** role, designated as a company-wallet approver. Personal wallets are never used as company signers.
* To start, choose the rotation action (**Add signer** or **Remove signer**), select the designated team member, and click **Start signer rotation**.

## The two-signer minimum

There must be **at least two active signers at all times**. The system enforces this: it will prevent you from removing the second-to-last signer, which would lock the organization out of treasury operations.

In practice, this means you cannot directly swap one of two signers. To replace a signer when only two are active:

1. **Add** a third signer (requires two passkey approvals).
2. **Remove** the outgoing signer (requires two passkey approvals).

{% hint style="warning" %}
Plan rotations ahead of departures or role changes. If an outgoing signer leaves before a replacement is added, the remaining signers must complete the rotation. And every step still needs two approvals.
{% endhint %}

See [Team members and roles](/zebec-application-suite/enterprise-payroll/team-roles.md) for how roles are assigned, and [Security and compliance](/zebec-application-suite/enterprise-payroll/security-and-compliance.md) for why multi-sig matters.