To digitally sign a PDF in Adobe Acrobat, open All tools, choose Use a certificate, click Digitally sign, drag a box where the signature should go, pick your digital ID (or create one), type its password, and click Sign. That gives you a certificate-based signature, which is different from dropping a picture of your signature onto the page.
The steps are quick once you have a digital ID. Getting the ID, and knowing whether the people receiving your file will trust it, is the part that takes some thought.
What does it mean to digitally sign a PDF?
Digitally signing a PDF means using a cryptographic key tied to your identity to sign the document, so anyone who opens it can check who signed and whether it changed afterward. NIST’s Digital Signature Standard (FIPS 186-5) says digital signatures “are used to detect unauthorized modifications to data and to authenticate the identity of the signatory.”
Adobe describes a certificate-based signature as one that “uniquely identifies the signer and uses encryption to safeguard the document.” Under the hood, the software takes a fingerprint (a hash) of the file, your private key signs that fingerprint, and the result is stored in the PDF. If someone later changes a single word, the fingerprint no longer matches.
Compare that with Fill & Sign in Acrobat Reader, or Markup on a phone. Those place an image of your signature on the page. Useful, but nothing about the image proves who put it there or stops anyone from editing the text around it. If the two ideas still feel blurry, we cover the difference in electronic signature vs digital signature.
What do I need before I can digitally sign a PDF?
You need a digital ID. Adobe describes it as having two parts: “A private key that applies your signature to documents” and “A public key that validates your signature for others.”
There are three common ways to get one:
- From a trusted provider. Certificate authorities issue IDs after checking who you are. Adobe notes Acrobat can use IDs stored in password-protected files, on smart cards or tokens, or in the Windows certificate store.
- A cloud or roaming ID. Adobe calls this “a digital ID that is stored on a server,” which you reach with an account from the organization that provides it, and you need an internet connection to sign.
- A self-signed ID. You create it yourself inside Acrobat in about a minute, from the Digital IDs section of the Signatures preferences.
The self-signed route is free and instant, which is exactly why it carries less weight. More on that below.
How do I digitally sign a PDF in Adobe Acrobat?
Open All tools, click Use a certificate, then Digitally sign, and follow the prompts. Here are Adobe’s steps, slightly condensed:
- Open the PDF and select All tools > Use a certificate.
- Select Digitally sign. A dialog explains how to mark the spot; select OK, then drag a rectangle where the signature should appear.
- In the Sign with a Digital ID dialog, pick the digital ID you want to use and select Continue. If you don’t have one yet, select Configure New Digital ID and follow the prompts to add one you already have or create a new self-signed ID.
- If you’re creating a self-signed ID, fill in your identity details and choose the key algorithm. Pick 2048-bit RSA, the larger of the two key sizes offered.
- In the Sign as dialog, check how the signature will look and type your digital ID password.
- If nobody else needs to sign, you can tick Lock document after signing to block further edits.
- Select Sign, choose where to save the signed copy, and select Save.
Before you start, make a copy of the unsigned PDF. If you spot a typo after signing, fixing it will change the document and show up as a change after the signature, so it’s cleaner to correct the original and sign again.
What if the PDF already has a signature field?
Click the signature field and Acrobat walks you through the same digital ID and password steps. If you’re the document’s author and want to control what others can change afterward, you can certify it instead (All tools > Use a certificate > Certify). Adobe notes a certifying signature can only go on a PDF that has no other signatures yet.
Is a self-signed digital ID good enough?
It’s good enough when the recipient doesn’t care who vouched for your identity, and not good enough when they do. Adobe says self-signed IDs “work well for personal or internal business purposes,” while IDs from a certificate authority “provide a higher level of identity verification because the authority confirms your identity before issuing the ID.” It adds that government agencies and regulated industries often require the CA-issued kind.
Think about why. You typed your own name into the self-signed ID, and nobody checked it. The math still proves the file hasn’t changed since you signed it, but on identity it proves only that whoever holds that file and password signed. A certificate from a provider that verified your ID tells the recipient a third party checked.
A hypothetical: Lena is a freelance engineer who sends stamped calculation reports to a county permit office as PDFs. The county’s submission rules say reports must carry a digital signature from a recognized provider. A self-signed ID won’t do there, so Lena buys a certificate. The same week she sends a client a one-page change memo, and a self-signed signature, or simply a Fill & Sign image, is fine because the client just wants it in writing. The recipient’s rules decide, not the software.
How does the person receiving the PDF check the signature?
They open it in a reader that validates signatures, such as Acrobat, and look at the signature status. With the preference “Verify signatures when the document is opened” turned on, Adobe says Acrobat “automatically validates all the signatures when a PDF is opened.”
Acrobat checks two things: whether the signer’s certificate (or the certificate that issued it) is one the recipient trusts, and whether the signed content changed afterward. Self-signed IDs fail the first check by design, so Acrobat flags the signature as having a problem even when the document is untouched. That’s not a broken signature. It’s the reader being honest that nobody it trusts vouched for you, so tell recipients to expect it, or use a certificate from a provider. We go through how to read those messages in how to check if a signed PDF was altered.
Do I need a digital signature for a contract to count?
In the US, generally no. Federal law defines an electronic signature as “an electronic sound, symbol, or process” adopted “with the intent to sign the record” (15 U.S.C. § 7006), and says nothing about certificates. A typed name or a drawn signature can do the legal job.
What a digital signature adds is evidence that the file hasn’t changed. You can get that without managing your own certificate: e-signature services typically seal the completed PDF with their own digital signature and attach an audit trail. Word can also add certificate-based signatures to its own files, which we cover in how to insert a signature in Word.
For a one-off report to an office that demands a certificate, Acrobat and a digital ID are the right tools. For everyday agreements where several people sign and you want a sealed copy at the end, that’s what SignWren does, without anyone needing their own certificate. You can start free.