Digital Signature PDF
Sign a PDF with your own certificate so anyone can see who signed it and whether it changed since. Drop in a signed PDF to check its signatures. Your certificate and file stay on this device.
Your file is ready
- Files stay on your device. Nothing is uploaded.
- Free, no sign-up, no daily limit.
- Works with Wi-Fi off once the page has loaded. Check it yourself
Updated by Khokhar Sab
How do I digitally sign a PDF with a certificate?
Choose the PDF, then choose your certificate file (.p12 or .pfx) and type its password. Pick whether a signature box shows on the page, and where. Press Sign PDF, then Download. The tool checks the signed file before you save it, and readers show who signed and when.
- Press Choose a PDF.
- Press Choose certificate, pick your .p12 or .pfx file, and type its password.
- Choose the page and position for the signature box, or turn the box off.
- Press Sign PDF, then Download.
What is the difference between a digital signature and an electronic signature?
An electronic signature is any sign of agreement, such as a typed name or a drawn signature placed on the page; Sign PDF does that. A digital signature is a cryptographic seal made with a certificate. It names the signer and breaks if anyone changes the file afterward, which a picture of a signature cannot show.
Our guide Electronic vs Digital Signature tests both on the same contract and sums up what US and EU law say.
Where do I get a certificate to sign with?
Three common routes: your employer or government may issue one, often on a smart card or as a .pfx file; a certificate authority sells signing certificates that PDF readers trust out of the box; or you can make a free self-signed one, which readers show as unverified until the person checking chooses to trust it.
How do I check if a PDF signature is valid?
Choose the signed PDF above. The tool lists every signature and says whether the bytes it covers are unchanged and whether the signature matches the certificate inside it. It also shows the signer, the issuer, the certificate's dates and the signing time. Trust in the issuer and revocation are not checked here.
For each signature, the tool hashes the exact bytes the signature covers (everything except the signature itself) and compares the result with the hash the signer sealed. It then checks the seal against the public key in the signer's certificate, using your browser's built-in cryptography. A single changed byte fails the first check.
How fast is it, and how much bigger does the PDF get?
Signing took 0.13 to 0.17 seconds for each of our test files on a laptop, because it needs one hash of the file and one key operation. The file grew by 16 to 21 KB each time: room for the signature and certificates, plus the signature box. Larger files take longer only to hash.
| Test file | Certificate | Size before | Size after | Time |
|---|---|---|---|---|
| 2-page contract, text only | Self-signed, RSA 2048 | 2.3 KB | 18.0 KB | 0.13 s |
| 2-page bank statement with tables | Issued by a test CA (2 certificates) | 10.6 KB | 31.1 KB | 0.13 s |
| 3-page scanned document | Self-signed, RSA 2048 | 145 KB | 161 KB | 0.13 s |
| 2-page report with photos | Issued by a test CA (2 certificates) | 656 KB | 674 KB | 0.17 s |
Measured on 12 October 2026 in Chrome 152 on an i5-8350U laptop, with a visible signature box on the last page. Time is the middle of three runs and includes reading the certificate. Every signed file passed the tool's own check.
Limits and fixes
- RSA certificates only for signing. Certificates with ECDSA keys can be checked here but not used to sign yet.
- No trusted timestamp. The signing time comes from your computer's clock. A timestamp from a timestamp server needs an online request, which this page does not make.
- No trust or revocation check. Checking that an issuer is trusted, or that a certificate was not cancelled, needs your PDF reader's trust list and online lookups.
- Smart cards and USB tokens cannot be reached from a web page. Export a .pfx file if your issuer allows it, or sign in a desktop reader.
- Password-locked PDFs need Unlock PDF first.
Frequently asked questions
Is it free?
Yes, with no sign-up or limits.
Is my certificate uploaded?
No. The certificate file, its password and the PDF are read in this browser tab only, and nothing is stored.
Will the signature show in PDF readers?
Yes. The signature uses the standard PDF format, so readers that support digital signatures list it with the signer and the time.
Can I sign a PDF that someone else already signed?
Yes. The new signature is added on top, and the earlier ones stay valid.
Is a digital signature legally binding?
Laws differ by country and by document. In the US, the ESIGN Act generally accepts electronic signatures. This is general information, not legal advice.
Can I edit the PDF after signing?
Any change after signing shows as a change in readers. Make all edits first, then sign last.
Related PDF tools
Learn more
How this tool was built and tested
- ISO 32000-1 (PDF 1.7), section 12.8, Digital signatures: the signature dictionary, byte range and adbe.pkcs7.detached format this tool writes
- RFC 5652: Cryptographic Message Syntax (CMS): the signed data, signed attributes and checks used for signing and checking
- Microsoft Learn: Export-PfxCertificate: exporting a Windows certificate with its private key as a .pfx file
- 15 U.S. Code 7001 (ESIGN Act): General rule of validity: US rule that a signature is not invalid only because it is electronic
- node-forge (BSD-3-Clause): reads the .p12 file and builds the signature; checks use the browser's Web Crypto