How to sign a PDF, and what actually counts as a signature

Someone sends you a contract and asks you to sign and return it. The old way was to print it, sign it, scan it and email it back, which costs you a printer, a scanner and fifteen minutes. Nobody wants to do that any more, and increasingly nobody expects you to.

But the alternatives are not all the same thing, and the words used to describe them are used loosely enough to be actively misleading. It is worth understanding what you are actually producing.

Three different things called signing

The first is a typed or drawn mark. You type your name in a signature font, or draw it with a mouse or finger, and it is placed on the page. Legally this is an electronic signature in most jurisdictions, and for everyday agreements it is generally accepted. What it is not is proof: nothing about the mark ties it to you specifically, and anyone could produce the same thing.

The second is an image of your handwritten signature, scanned or photographed and pasted onto the document. It looks more official and carries exactly the same evidential weight as the first, which is to say very little on its own. An image can be copied off one document and applied to another in seconds.

The third is a digital signature backed by a certificate. This is a genuinely different mechanism. It uses cryptography to bind the document to a verified identity, and it produces something the first two cannot: tamper evidence. If a single character of the document changes after signing, verification fails and the reader says so.

• Typed or drawn mark: fast, widely accepted, no proof of who made it
• Pasted signature image: looks traditional, no more secure than typing
• Certificate-based digital signature: verifiable identity and tamper detection, requires a certificate

Which one you actually need

For most documents the simple approach is entirely appropriate. Internal approvals, delivery confirmations, school forms, rental agreements between individuals, freelance contracts of modest value: a typed or drawn signature is normal practice and nobody will question it.

The calculation changes when the document is valuable enough that someone might later dispute it, or when a regulator or court is involved. Property transactions, significant financial commitments, employment matters in some jurisdictions, and anything you would be uncomfortable defending years later all deserve a certificate-based signature or a dedicated signing platform that records an audit trail.

The middle ground is worth knowing about too. Many signing services do not use certificates but do record who signed, when, from which address, and after seeing which version of the document. That audit trail is often more useful in a dispute than the mark itself.

Getting a clean signature image

If you are pasting a handwritten signature, the quality of that image is the difference between looking professional and looking like a fax from 1998.

1. Sign on plain white unlined paper with a black pen that has a reasonably thick stroke.
2. Photograph it in bright, even daylight rather than under a ceiling light that casts a shadow across the page.
3. Crop tightly to the signature itself, leaving only a little margin.
4. Increase contrast so the paper reads as pure white and the ink as solid black.
5. Remove the background so the signature sits on transparency rather than a white rectangle.

That last step is the one that matters most visually. A signature on a white rectangle placed over a shaded or bordered part of a form shows an obvious box around it. On a transparent background it sits on the page as if it belonged there.

Protecting a signed document

Once signed, a PDF is still an ordinary PDF, and a pasted signature image can be moved, deleted or lifted by anyone with an editor. There are two sensible precautions.

Flattening merges your signature permanently into the page so it is no longer a separate object that can be dragged off. It does not prevent a determined forger, but it stops casual tampering and stops the signature disappearing in readers that handle annotations badly.

Setting a permissions password on the finished document discourages editing further. Be realistic about what that achieves: it prevents accidental modification and signals intent, but it is not a cryptographic guarantee the way a certificate signature is.

A pasted signature proves someone had a picture of your signature. A certificate proves the document has not changed since you signed it. Those are very different claims.

A word on requests you should refuse

Be wary of anyone asking you to email a clean, cropped image of your signature on its own. A signature file with no document attached is a reusable asset, and once sent you have no control over what it gets applied to.

If a signature is needed, sign the actual document and return that. There is no legitimate reason for a counterparty to need your signature separately from the thing you are signing.