Electronic Signature vs Digital Signature: The Difference
Someone asks for a “digitally signed” copy. You draw your name on the PDF and send it back. They reject it.
The two terms get used as though they mean the same thing, including by people who should know better, and most of the time the sloppiness costs nothing. When it costs something, it costs a rejected filing or an unenforceable agreement — so it is worth ten minutes to understand which one you have.
The distinction in one line
An electronic signature is any mark you apply to show intent. A drawn squiggle, a typed name, a tick in a box, a photographed signature, a line at the bottom of an email.
A digital signature is a cryptographic operation performed with a private key tied to a certificate that identifies you, producing a seal that proves who signed and proves the document has not changed since.
The first is about intent. The second is about proof. Every digital signature is a kind of electronic signature; almost no electronic signature is a digital signature.
What each one actually is
The electronic signature
A picture placed on a page. When you draw your name in Sign PDF, the result is an image laid onto the page like any other graphic, and after export it is page content in exactly the way printed text is.
That has a specific consequence worth stating: a visible signature carries no information about who made it. The file does not know. The image could be drawn by anyone, copied from another document, or lifted from a photograph. It shows that a signature was placed. It does not show by whom.
For most documents that is entirely adequate, because the surrounding context does the work the signature does not — you emailed it from your address, in a thread where the terms were agreed, to someone who knows you.
The digital signature
Not a picture. A number, computed from the entire contents of the document together with a private key that only you hold.
Three properties follow, and they are the whole point:
- Integrity. Change one byte of the document and the number no longer matches. Verification fails immediately and specifically.
- Authenticity. The matching public key sits in a certificate issued by an authority that checked your identity. The signature ties to that certificate.
- Non-repudiation. Because only you hold the private key, it is very hard to credibly claim you did not sign.
A digital signature does not need to be visible at all. When you see a signature panel in a PDF reader saying the document is signed and valid, that panel is reporting a verification result, not describing a picture.
Side by side
| Electronic signature | Digital signature | |
|---|---|---|
| What it is | An image or mark on the page | A cryptographic seal over the file |
| Proves identity | No | Yes, via a certificate |
| Detects changes | No | Yes, any change at all |
| Needs a certificate | No | Yes |
| Survives editing the document | Yes — it is page content | No — invalidated by any change |
| Verifiable by the reader | No | Yes, automatically |
| What this site produces | Yes | No |
That last row is why this guide exists on this site. Sign PDF produces the left-hand column, and pretending otherwise would be the most consequential thing we could get wrong.
Both are usually legally valid, and that surprises people
The instinct is that only the cryptographic one “counts”. That is not how the law generally works.
In the United States, the Electronic Signatures in Global and National Commerce Act provides that a signature or contract may not be denied legal effect merely because it is electronic. Most developed jurisdictions have comparable legislation. A typed name at the bottom of an agreement can bind you.
So the practical question is rarely is this valid — it is usually can I prove it, later, to someone who disputes it.
That is where the two diverge. An electronic signature is valid and hard to prove. A digital signature is valid and easy to prove. If nobody ever disputes the document, the difference never surfaces. Disputes are exactly the situation you cannot predict in advance.
This is general information, not legal advice. Most such laws carve out categories — wills, certain family and property matters, some notices — and regulated sectors impose their own requirements on top.
Which one do you need?
An electronic signature is fine for: internal approvals, routine commercial agreements, consent forms, invoices, delivery notes, engagement letters, NDAs between parties who know each other, and the great majority of documents that ask for a signature.
You need a digital signature when:
- The requirement says qualified, advanced, or certificate-based. Those are terms of art, and they mean cryptography.
- A court, regulator, tax authority, or bank specified it.
- The document is high-value enough that a dispute is realistic.
- You are one of several parties signing in sequence and each needs an independently verifiable seal.
- Long-term integrity matters — an archived record that must be provably unchanged in ten years.
The tell: if the request names a format (“a signed PDF”), an electronic signature is being asked for. If it names a property (“a verifiable signature”, “a qualified signature”), it is not.
How to get a digital signature
This site cannot give you one, and that is not a gap to be filled later — it is structural. A digital signature requires a private key issued to you after an identity check, and no browser-based tool can perform that check.
The routes are: a certificate authority or trust service provider in your jurisdiction, a national digital identity scheme where one exists, a signing platform that issues certificates as part of its service, or your organisation’s IT department if it operates its own authority.
Whichever route, the certificate ends up on your machine or a token, and desktop PDF software applies it.
What breaks a signature
This trips people up constantly, so it is worth being concrete.
A digital signature is invalidated by any subsequent change. Merging the document with another, splitting it, adding page numbers, rotating a page, compressing it, cropping it — all of these rebuild the file, and a rebuilt file does not match the seal. This is not a flaw in the tools; it is the feature working. A seal that survived editing would prove nothing.
So the order is fixed: finish the document completely, then sign it. Preparing a PDF bundle for submission sets out that sequence, and it is the same reason merging warns about signed inputs.
A visible signature survives all of it, because it is page content. It also proves correspondingly less — the two facts are the same fact.
How to tell what a document already has
Given a PDF someone sent you, you can usually work out which kind it carries in a few seconds.
Open it and look for a signature panel. A digitally signed document announces itself: most readers show a banner or a sidebar reporting that the file is signed and whether verification succeeded. No banner means no cryptographic signature, regardless of what appears on the page.
Try to select the signature. If the document has real text and the signature is a placed image, you can usually select the text around it but not the mark itself. That tells you it is page content — a picture.
Check whether the page is a picture too. On a scanned document nothing selects at all, and a signature there tells you only that someone signed the paper before scanning it. That is a photograph of a signature, evidentially weaker again — the diagnosis is the same one in why can’t I copy text from a PDF.
A verification banner that reports the signature is invalid is worth reading carefully rather than dismissing. It usually means the document was edited after signing, which is exactly what the mechanism exists to tell you.
Signatures, encryption, and passwords
Three separate things that get bundled together in conversation:
- A signature answers who approved this, and has it changed?
- Encryption answers who can open this? — see how to password-protect a PDF.
- Permission flags ask viewers to restrict printing or copying, and are honoured by convention rather than enforced.
You can combine them. A document can be signed and then encrypted for transit, which is the right order: sign the finished document, then protect the signed file.
The format’s part in it
Signature fields, signature dictionaries, and certificate-based signing are all specified in ISO 32000-2, which is why a digitally signed PDF verifies in any compliant reader rather than only in the software that signed it. The PDF Association publishes accessible reference material on the specification.
Standardisation is the practical difference between the two kinds. A visible signature works everywhere because it needs no support at all. A digital signature works everywhere because every compliant reader implements the same verification — a far stronger guarantee, and the reason it is worth the extra machinery when you need it.