How to Sign a PDF Online Free: Electronic vs Digital Signatures Explained

The phrase 'sign a PDF' covers two operations that share an appearance and almost nothing else.

The first is a simple electronic signature: a mark that records your intent to be bound by the document. In practice that is your handwritten signature drawn with a mouse or stylus, a typed name in a script typeface, or a scanned image of your signature placed on the page. It is what most people mean, it is what most business documents need, and it is what a browser can do in under a minute.

The second is a digital signature in the cryptographic sense. It uses a certificate and a key pair to produce a signature value over the document's bytes. It proves two things that a drawn signature cannot: that the signature was made with a particular private key, and that the document has not been altered since. If anyone changes a single byte, the verification fails and readers report the signature as invalid.

These are not better and worse versions of the same thing. They answer different questions. A drawn signature answers 'did this person indicate agreement?' A digital signature answers 'is this the exact document that was signed, and who holds the key that signed it?' Which one you need depends entirely on what the recipient will do with the file.

The legal position is more permissive than most people assume, and the useful thing is knowing where the limits are.

In the United States, the Electronic Signatures in Global and National Commerce Act establishes that electronic signatures carry the same legal effect as handwritten ones for most transactions, and the Uniform Electronic Transactions Act does the same at state level. In the European Union, the eIDAS Regulation defines three tiers: simple, advanced, and qualified electronic signatures, with the qualified tier carrying an explicit equivalence to a handwritten signature across member states.

The common thread is that the law generally cares about intent and record integrity rather than about the specific technology. A signature is effective because the parties intended to sign and the record can be produced, not because of the tool used to place the mark.

The exceptions are what matter in practice. Certain documents are excluded from these frameworks or have their own requirements: wills and testamentary instruments, some family law matters, certain court filings, and documents governed by specific regulations that name a signature standard explicitly. Land and property transactions frequently require a witnessed or notarised signature. Public procurement and regulated filings may require a qualified or advanced signature.

The practical rule is to read the document and the destination. If a contract clause, a court rule, or a government portal specifies a signature standard, that requirement governs, and a drawn mark will be rejected regardless of what the general law permits.

The workflow is short, and the useful decisions are at the start.

PDF annotations are separate objects that sit on top of page content. A signature placed as an annotation is, technically, a comment. It can be moved, resized, or deleted by anyone with an editor, and some readers hide annotations by default.

Flattening changes that. The signature is drawn into the page's content stream, becoming part of the page image in the same way as the printed text. It cannot be moved or removed without editing the page itself, and it appears in every viewer regardless of annotation settings.

It is important to be precise about what flattening does not do. It does not provide tamper evidence. Someone with the right tools can still modify the page, and a flattened signature will not detect it. Flattening prevents casual removal, which is the realistic threat for a business document, but it is not a cryptographic guarantee.

The distinction matters when you consider what happens after signing. If you flatten the signature and then compress the document, the signature remains visible but there is no mechanism that would flag the modification. That is usually acceptable. If you need the file to be provably unmodified, you need a digital signature, and that requires a different tool.

The most common way to break a signed document is to keep working on it.

If the document carries a digital signature, any subsequent modification invalidates it. That includes merging it with another file, compressing it, converting it, or adding a page. Readers will report the signature as invalid, which is accurate and often embarrassing. The correct order is always to finalise the content, apply any size optimisation, and sign last.

If the document carries only a simple electronic signature, modification will not trigger a warning, but it will change the artefact the other party agreed to. Adding a page after signature, or altering a term, creates a document that nobody signed in that form. In a dispute, that is a problem regardless of what the file format does.

There is also a privacy dimension worth a moment's thought. A signature image uploaded to a signing tool is a reusable asset. Once it exists on a device, it can be placed on other documents. If you are signing something consequential, consider whether you want a stored signature image at all, or whether drawing a fresh one each time is a better default.

Finally, think about where the signed file goes next. If it contains personal data or commercial terms, the considerations in the privacy guide apply to it just as they did before it was signed.

There are situations where a drawn signature is not a shortcut but a mistake.

Court filings increasingly require digitally signed documents, and some electronic filing systems will reject anything else. Land registries and notarial processes frequently require an advanced or qualified signature. Some regulated industries, including certain financial and healthcare contexts, have contractual or statutory requirements that name a signature standard. Cross-border contracts sometimes specify a signature level in the agreement itself.

In these cases you need a certificate from a trusted issuer, which usually means either a qualified trust service provider or a service with a recognised certification. That is a different product category from a browser utility, and it typically involves identity verification and a cost.

The sensible approach is to check before you sign rather than after. Read the document for a signature requirement clause, check the submission portal's instructions, and if either mentions a signature standard, treat it as binding. A signed document that gets rejected costs far more time than the setup for a proper digital signature.

For everything else, which is the large majority of business documents, a simple electronic signature placed in a browser is fast, free, and adequate.