Security
How to verify a digitally signed PDF in the UK
UK law accepts electronic signatures of many kinds, so most signed PDFs you receive will not be “qualified”, and do not need to be. Verify the file (is there a digital signature, is it intact, was anything added after signing, who issued the certificate), then verify the context: who sent it, through what platform, and whether the kind of document has special formalities such as a witnessed deed.
In the UK, the question "is this signed PDF valid?" is less often a legal puzzle than a practical one. English law has long taken a flexible view of what counts as a signature, and the law was confirmed and clarified for electronic signatures some years ago. What matters most in practice is whether the file is intact, whether it came from who it claims, and whether the document needs any special formality.
This guide covers England and Wales and Northern Ireland; Scotland has its own rules on some formal documents, noted briefly below.
The short answer
- Check the file with Verify PDF Signature: digital signature or picture, intact or changed, who issued the certificate.
- Check the context: who sent it, through which platform, and whether the signer is really who they say. For high-value documents, by a call to a number you already have.
- Check the formalities: deeds, lasting powers of attorney, wills, some property and court documents have extra requirements.
The legal background, in brief
- The Electronic Communications Act 2000 makes electronic signatures admissible as evidence.
- The UK retained the EU eIDAS regulation in amended form after Brexit (UK eIDAS). It keeps the concepts of simple, advanced and qualified electronic signatures, and the Information Commissioner's Office supervises UK qualified trust service providers.
- The Law Commission concluded in 2019 that an electronic signature is capable in law of executing a document, including a deed, provided the signer intends to authenticate it and any formalities are met. Courts have accepted typed names, clicks and email signatures in appropriate cases.
In short: for most commercial documents, a simple electronic signature is legally capable of binding. The strength of the evidence is another matter, and that is where verification comes in.
Qualified signatures after Brexit
- The UK keeps its own list of qualified providers.
- UK eIDAS continues to recognise qualified signatures from EU-qualified providers.
- The EU does not automatically recognise UK qualified providers, so a UK qualified signature is not treated as a qualified signature in the EU.
Qualified signatures are rarely required in UK domestic practice, but they matter for some cross-border dealings. To determine qualified status, use a validator that consults the relevant trusted list. For EU signatures, see How to verify a digital signature in the EU.
Step 1: check the file
Upload the PDF exactly as received to Verify PDF Signature.
- No digital signature found: the signature is a picture or typed name. Legally it may well be enough; evidentially it proves nothing about whether the content changed. Rely on the sending context (Step 2).
- Signature: Valid, verdict Unchanged since [name] signed it: the signed content is intact.
- Changes after signing: read the list and compare the pages. On a contract, a later signature by the other party is normal; a changed clause is not.
- Certificate details: who the certificate was issued to and by. Many UK documents are signed through e-signature platforms, whose seal is issued to the platform rather than the individual; see How to verify a DocuSign or Adobe Acrobat Sign document.
Step 2: check the context
For documents without a certificate-based signature (which is most of them in the UK) the evidence of who signed comes from around the document:
- The platform's audit trail, if one was used: which email address signed, when, from where, with what authentication.
- The email chain: was it sent from the person's known address, in reply to a thread you started?
- Independent confirmation for anything involving money or property: a call to a number you already had, not one in the email.
Conveyancing and payment fraud in the UK very often involves genuine-looking documents and emails with changed bank details. The signature check will not catch a changed email address, only a phone call will.
Step 3: check the formalities
Some documents need more than a signature:
- Deeds must be signed in the presence of a witness who attests the signature. The Law Commission's view is that the witness must be physically present; remote witnessing by video is not generally accepted for deeds, and some registries have their own rules for e-signed deeds.
- HM Land Registry accepts certain electronically signed deeds under its own procedures, including identity checks, for specified dispositions. Check its current practice guidance.
- Wills in England and Wales must be signed and witnessed in the traditional way; electronic wills are not generally valid.
- Lasting powers of attorney have their own signing process.
- Court documents follow court rules and practice directions.
- Scotland has separate rules for formal documents: an electronic version needs an advanced electronic signature to be formally valid, and a stronger, certificate-backed signature to be self-proving (probative). Check the current Scottish rules for the document in question.
If a document falls into one of these categories, a valid digital signature is not the end of the check.
UK official documents
- Government departments and agencies increasingly send PDFs with digital signatures or seals. Check integrity as above; a certificate issued to the department and chaining to a recognised authority is what you would expect.
- Companies House documents and data can be checked directly on the public register; for company facts, the register is the source of truth, not a PDF someone sends you.
- For degree certificates, UK universities commonly use an official verification service or confirm directly through their registry. See How to verify a government certificate or university degree PDF.
What our checker tells you: and what it doesn't
Verify PDF Signature reports integrity, every change after signing, the certificate and chain, revocation, timestamps and whether long-term validation data is present, and lets you download a PDF report. It shows EU qualified status from the EU Trusted Lists, but not UK qualified status (the UK keeps its own list), and it does not decide whether a document meets a particular legal formality.
Common questions
Are electronic signatures legally valid in the UK?
Generally yes. The Electronic Communications Act 2000 makes them admissible, and the Law Commission concluded in 2019 that an electronic signature can validly execute a document, including a deed, if the signer intends to authenticate it and any formalities are met. Some documents, such as wills, still need traditional signing.
Does a UK qualified electronic signature work in the EU?
Not automatically as a qualified signature. The UK recognises EU qualified providers, but the EU does not recognise UK qualified providers, so a UK qualified signature is not treated as qualified in the EU.
Can a deed be signed electronically in England?
Yes in principle, but it must still be witnessed, and the witness is generally expected to be physically present. HM Land Registry has its own procedures for electronically signed deeds.
The signed PDF has no digital signature. Is it still binding?
It may be: UK law accepts many forms of electronic signature. But the file itself cannot prove it was not changed, so rely on the platform's audit trail or other evidence of who signed and when.
How do I check a signed contract hasn't been altered?
If it has a digital signature, a checker will show whether the signed content changed and list anything added afterwards. Verify PDF Signature also shows each changed page as signed and as it is now.