Creating a digital signature online in India means obtaining a Digital Signature Certificate (DSC) from a licensed Certifying Authority (CA). A DSC is an encrypted electronic identity that allows you to sign documents digitally with the same legal validity as a handwritten signature, and it is required for a wide range of official and financial transactions in India, including company filings with the Ministry of Corporate Affairs, income tax returns, GST filings, and government tenders.
This guide covers the complete process for creating a digital signature online in India, the documents required, the costs involved, and what to expect at each stage.
What a Digital Signature Certificate Is
A DSC is issued by a Certifying Authority licensed by the Controller of Certifying Authorities (CCA) under the Information Technology Act, 2000. It uses public key cryptography to create a digital signature that uniquely identifies the certificate holder and detects any alteration to a document after it has been signed.
DSCs are classified based on the level of assurance and the certifying authority’s verification process. Class 3 DSCs are now the mandated standard for all types of transactions in India, having replaced the older Class 2 category. A Class 3 DSC requires more rigorous identity verification and provides the highest level of assurance for online transactions, tenders, and regulatory filings.
Step 1: Choose a Licensed Certifying Authority
The first step is selecting a Certifying Authority licensed by the CCA. India has several licensed CAs, including eMudhra, Capricorn, Sify, NSDL, and XtraTrust, among others. Each CA operates its own online portal for DSC applications.
When choosing a CA, consider the processing time, customer support quality, pricing, and whether the CA has experience with your specific use case (for example, GST filings, MCA filings, or tender submissions). Most licensed CAs offer broadly similar products since the underlying legal framework and certificate classes are standardised by the CCA.
Step 2: Gather the Required Documents
Before starting the application, gather the documents you will need. The requirements differ slightly for individuals and organisations.
For individuals:
- PAN card (mandatory, as the DSC is linked to your tax profile)
- Aadhaar card (for identity verification and OTP-based authentication)
- A recent passport-sized photograph
- An active mobile number linked to your Aadhaar card, for OTP verification
- Proof of address (utility bill, driving licence, voter ID, or passport)
For organisations:
- The company’s PAN card
- Certificate of Incorporation
- GST registration certificate
- Board Resolution naming the authorised signatory
- Identity and address proof of the authorised signatory
For foreign nationals:
- Local government-issued identity document
- Address proof, apostilled or notarised as required by the specific CA
Visit the chosen CA’s website and locate the DSC application section. Select Class 3, and specify the certificate type: Sign Only (for standard signing purposes) or Sign and Encrypt (for use cases requiring encrypted communication, such as tenders that involve confidential bid documents).
Choose the validity period for the certificate: typically 1, 2, or 3 years. Longer validity periods generally cost more but reduce the frequency of renewal.
Fill in your personal or organisational details, upload the required documents, and proceed to the verification step.
Step 4: Complete eKYC Verification
The eKYC (electronic Know Your Customer) process is the identity verification stage and is now fully paperless for most applicants. This typically involves:
Aadhaar-based e-KYC. Using your Aadhaar number with OTP verification linked to your registered mobile number. This is the fastest verification route for individuals.
Video verification. Many CAs require a short video call or video verification step where you confirm your identity on camera, sometimes reading out a specific code or statement provided by the CA.
Email and phone verification. OTPs sent to your registered email and mobile number to confirm both channels are accessible to you.
The eKYC process is designed to be completed within a single session and typically takes a few minutes to an hour, depending on the CA’s queue and verification requirements.
Step 5: Make Payment
Once the application and eKYC are complete, payment is required to process the DSC issuance. Payment can be made through net banking, credit card, debit card, or UPI. Costs vary depending on the certificate class, validity period, and the CA’s pricing, but Class 3 DSCs typically range from a few hundred to a few thousand rupees depending on the validity period chosen and whether a USB crypto-token is included.
Step 6: Receive and Install Your Digital Signature
Once the CA verifies your application and documents, the DSC is issued electronically. Depending on the type of DSC:
USB token-based DSC. The CA typically posts an encrypted USB crypto-token containing your digital signature certificate to your registered address. You will need to install the token driver and, for specific use cases, a bridging utility such as emSigner that allows government portals (like the GST portal or the Income Tax e-filing portal) to communicate with your USB token.
Cloud-based or software DSC. Some CAs now offer cloud-based signing solutions where the private key is securely managed by the CA rather than stored on a physical token, allowing you to sign documents from any device without a USB token. This option is increasingly common but should be verified for compatibility with the specific portal or regulatory filing you need to use it for.
Registering Your DSC on Government Portals
Once you have your DSC, you typically need to register it on the specific government portal where you intend to use it.
For Income Tax e-filing: Log in to the e-Filing portal, go to your profile, select Register DSC, confirm that you have downloaded and installed the emsigner utility, plug in your USB token, and complete the registration.
For MCA (ROC) filings: Register your DSC on the MCA portal by associating it with your Director Identification Number (DIN) or the relevant company registration.
For GST filings: Register your DSC on the GST portal under your GSTIN profile, following a similar process with the emsigner utility.
Each portal has its own registration workflow, but the general pattern of installing the token driver, downloading the required bridging software, and associating the certificate with your account applies across most Indian government portals.
What Changed in 2026: Compatibility Requirements
Two technical changes are relevant for anyone creating a digital signature online in 2026.
New series tokens. Only “new series” USB tokens are compatible with certificates issued after March 2023. If you are renewing an older DSC, you may need a new token even if your existing one still functions physically.
FIPS 140-3 transition. The industry is moving toward the FIPS 140-3 security standard for cryptographic modules, with a transition deadline around September 2026. When applying for a new DSC, confirm with your chosen CA that the token and certificate meet the current security standard requirements.
Digital Signature vs Electronic Signature: A Quick Clarification
A common point of confusion when creating a digital signature online is the difference between a digital signature and a broader electronic signature. A digital signature specifically refers to a cryptographically secured signature created using a DSC issued by a licensed CA. An electronic signature is a broader category that includes any electronic method of signing, including typed names, scanned signature images, and click-to-agree confirmations.
Digital signatures created through DSCs provide significantly stronger legal and technical assurance than basic electronic signatures because they are backed by CA-verified identity, cryptographic tamper detection, and are recognised under the IT Act, 2000 as legally equivalent to handwritten signatures.
For simpler signing needs, such as executing commercial contracts, NDAs, or agreements that do not require a DSC specifically, Aadhaar eSign or an e-signature platform provides a faster and more accessible route than obtaining a full DSC. Tools such as Legistify eSign support Digital (OTP), Aadhaar eSign, and DSC Token signing in one place, free and without requiring a separate CA application, for documents that do not specifically mandate a DSC.
Conclusion
Creating a digital signature online in India through a licensed Certifying Authority is now a fully paperless process that can typically be completed within a day, and often within a few hours, given the right documents and a smooth eKYC verification. Understanding which class of certificate you need, gathering the right documents in advance, and being aware of the 2026 compatibility requirements around token series and security standards will help the process go smoothly.
