How to Verify PDF Signature: Complete Guide You receive a signed contract via email. How do you know it is truly signed by the person named and has not been altered after signing? Digital signatures in PDFs provide exactly that assurance – but only if you verify them correctly. Verification confirms three critical elements: authenticity (the signer is who they claim to be), integrity (the document has not been changed since signing), and trust (the certificate comes from a recognized authority). This guide will teach you how to verify PDF signatures using free tools (Adobe Acrobat Reader), professional software (Adobe Acrobat Pro), online validators, and command-line tools. You will also learn to understand certificate chains, timestamps, and what to do when verification fails. What Is a PDF Digital Signature? (And Why Verify It) A digital signature in a PDF is not a scanned image of a handwritten signature. Instead, it uses Public Key Infrastructure (PKI) cryptography. The signer has a private key (kept secret) and a public certificate (shared). When signing, the software creates a unique hash of the document and encrypts it with the private key. Anyone with the public certificate can verify that the hash matches – proving the document is unchanged and signed by the holder of the private key. Verifying a signature gives you: Authentication: Confirms the signer's identity (via a trusted Certificate Authority). Non-repudiation: The signer cannot deny signing the document. Integrity: Any change after signing invalidates the signature. Timestamp validation: Shows when the signing occurred, even if the certificate later expires. Verification is essential for contracts, legal filings, tax documents, and any PDF where authenticity matters. Prerequisites: What You Need Before Verifying To properly verify a PDF signature, ensure you have: A PDF viewer that supports digital signature verification: Adobe Acrobat Reader (free) is the most reliable. Other viewers (Foxit, Nitro, Chrome PDF viewer) may have limited support. Internet connection (for some verifications): To check certificate revocation status (CRL/OCSP) and timestamp servers. Trust anchors (root certificates) installed: Adobe and Windows include root certificates from major authorities (DigiCert, GlobalSign, Let's Encrypt). But for organizational certificates, you may need to manually add trust. The original signed PDF (without modifications): Do not convert, compress, or edit the file before verification. Step-by-Step: Verify PDF Signature Using Adobe Acrobat Reader (Free) Adobe Acrobat Reader is the most trusted tool for signature verification. Follow these steps: Open the signed PDF in Adobe Acrobat Reader. Look for the signature panel: click "Signatures" on the left sidebar (the pen icon). You will see a list of signatures with status icons. Click the signature you want to verify. A menu appears. Click "Signature Properties". A dialog box opens. Check the "Validity Summary" line. It shows one of three statuses (explained below). For more details, click "Show Certificate". See the certificate details: Issuer, Validity period, Purpose, and Chain. Click "Trust" tab to see if the certificate is trusted by your system. If not, you can manually trust it (with caution). If a timestamp is present, click "Timestamp Properties" to see when the signature was applied. After verification, the signature list will show a green checkmark for valid signatures, a yellow warning for unknown certificates, and a red X for invalid signatures. Understanding Signature Status Messages Status MessageIconMeaningNext Steps Signature is VALID (green checkmark)Consider manually verifying the signer's identity via out-of-band communication (email, phone). Signature is INVALID (red X)🔴Document has been modified after signing OR certificate has expired without a timestamp OR the signature is corrupted.Do not trust the document.Ask the signer to re-sign a fresh copy.Check if the file was altered inadvertently (e.g., opened and saved by a PDF editor). Verifying Signatures in Adobe Acrobat Pro (Additional Features) Adobe Acrobat Pro (paid) offers advanced verification features: Compare document to signed version: Tools > Compare Files. Shows every change made after signing. Validate all signatures in one click: Click the Signatures panel > Validate All. See a summary report. Certificate validation settings: Edit > Preferences > Signatures > Verification. You can set trust levels, revocation checking (CRL/OCSP), and timestamp server preferences. Add verification information as a visible seal: After verifying, you can add a validation seal to the PDF (e.g., "Verification passed" stamp). Verifying PDF Signatures Online (Free, but Be Cautious) Several online tools can verify PDF signatures without installing software. However, never upload sensitive or confidential PDFs to unknown online services – they may store or leak your documents. Use only for test files. Online Signature Checker (e.g., PDF Verifier): Some sites allow you to upload a PDF and return signature status. Limited to basic validation (no certificate chain checking). Adobe Document Cloud (free Adobe account): Upload PDF, view signature panel, verify. Files stored temporarily. SmallPDF Signature Verification (free tier): Check if a PDF is signed and verify validity. Requires account for multiple uses. Privacy reminder: For any document containing personal or business confidential information, use offline software (Adobe Acrobat Reader) to verify. Our protect PDF tool can add password protection before uploading, but the best policy is to avoid uploading altogether. How to Verify PDF Signatures Using Command Line (OpenSSL & Tesseract) For developers or advanced users, you can verify signatures programmatically using OpenSSL. However, PDF signatures are embedded in the PDF structure, which is complex. A simpler approach: use Java iText library or Python with PyPDF2/pikepdf. Example command-line approach (requires extracting signature data): openssl pkcs7 -inform DER -in signature.der -text -noout This extracts the certificate chain from a raw signature file. For most users, mouse-click verification in Adobe Reader is sufficient. Certificate Validation: Trust Chains and Revocation Checks A signature might appear "Unknown" even if the document has not been tampered with. This means the signer's certificate is not trusted locally. Trust is established through Certificate Authorities (CAs) like DigiCert, GlobalSign, or Let's Encrypt. Your computer or Adobe Reader includes a list of trusted root certificates. If the signer used a certificate issued by an organization's internal CA (not a public CA), your system will mark it as "Unknown". To fix: Manually trust the certificate: In Signature Properties > Show Certificate > Trust > Add to trusted identities. Only do this if you are certain the signer is legitimate. Ask the signer for their CA's root certificate and install it. For qualified digital signatures (eIDAS, Adobe Approved Trust List – AATL): Adobe includes these lists by default, so they appear valid. Additionally, verification includes checking revocation status via Certificate Revocation Lists (CRL) or Online Certificate Status Protocol (OCSP). If the signer's certificate has been revoked (e.g., lost private key), the signature will be marked invalid even if the document is unchanged. Timestamps: Why They Matter for Long-Term Verification Digital certificates have expiration dates. If a certificate expires after signing, the signature would become invalid for future verification – unless a timestamp is embedded. A timestamp proves that the signature existed before the certificate expired, so it remains valid even after expiration. To check if a signature includes a timestamp: In Adobe Acrobat Reader, open Signature Properties. Look for "Timestamp" section. If present, it will show the signing time and timestamp authority. Click "Show Timestamp Properties" for details (e.g., "Timestamp is valid"). Timestamps are crucial for long-term archival of legal documents. Many e-signature platforms (DocuSign, Adobe Sign) automatically include timestamps. Common Signature Verification Problems and Solutions ProblemLikely CauseSolution "Signature is Unknown"Certificate not trusted locally (internal CA or self-signed).Manually trust certificate after verifying signer identity via separate channel. Or install the organization's root CA. "Signature is Invalid" (red X)Document modified after signing OR certificate revoked.Do not trust. Compare the modified date with the signature timestamp. Request a fresh signed copy. Certificate expired but signature was valid beforeNo timestamp embedded, or timestamp server unreachable.If no timestamp, treat as expired. Ask signer to use timestamped signature in the future. Online revocation check failed (CRL/OCSP)No internet connection or CA server down.Connect to internet and re-verify. If server down, accept the signature with caution. Signature appears in name but no panelThe PDF contains only an image of a signature, not a digital signature.This is not a verifiable digital signature. Treat as a scanned handwritten signature with no cryptographic proof. Best Practices for Verifying PDF Signatures Always use the latest version of Adobe Acrobat Reader. Old versions may not support modern certificate hashes (SHA-256). Check the certificate chain and expiration. Even if the signature is valid, a certificate that expired yesterday may reduce trust unless a timestamp exists. Verify signatures immediately upon receipt. Do not store for months before checking; certificates might expire or be revoked. For critical documents, confirm signer identity out-of-band. Call or email the purported signer using a known, trusted contact, not the contact info on the PDF. When a signature is invalid, do not bypass the warning. It likely means the document was altered – discard it and request a fresh copy. Keep your system's trusted root certificate store updated. Microsoft and Adobe update root certificates via Windows Update and Adobe updates. Tools for Verifying PDF Signatures – Comparison ToolPlatformPriceFeaturesPrivacy Adobe Acrobat ReaderWin/Mac/iOS/AndroidFreeFull verification, certificate details, timestamp, trust management, revocation checkingLocal processing (no upload) Adobe Acrobat ProWin/Mac~$15/monthAll of Reader plus: compare files, validate all signatures, add verification seal, advanced verification settingsLocal (optional cloud) Foxit PDF ReaderWin/Mac/iOS/AndroidFreeBasic signature validation, certificate chain displayLocal Online Validators (e.g., SmallPDF)WebFree tier (limited)Upload PDF, get validity statusFiles uploaded to server – not for sensitive documents 🔐 Related PDF Security Tools 🛡️ Protect PDF – Add password protection before sending for signature ✍️ Sign PDF – Add your own digital signature (graphical or certificate-based) 🔍 OCR PDF – Extract text from signed PDFs (does not affect signature) 🗜️ Compress PDF – Reduce file size (note: may invalidate signatures! Always compress before signing, not after.) For most users, Adobe Acrobat Reader (free) is the best tool to verify PDF signatures. Conclusion – Never Trust an Unverified PDF Signature Verifying PDF signatures is a simple but critical step in any workflow involving signed documents. By using Adobe Acrobat Reader (free), you can quickly check the status, certificate trust, and timestamp. If the signature is valid (green checkmark), you can be confident the document is authentic and unchanged. If it is unknown or invalid, treat it with suspicion. Understanding the difference between valid, unknown, and invalid statuses, along with certificate revocation and timestamping, will protect you from tampered or forged documents. Remember: a scanned image of a signature is not digitally signed. Only cryptographic digital signatures provide verifiable assurance. Implement the practice of verifying every signed PDF you receive – for contracts, invoices, compliance documents, and official communications – as part of your security routine. For more PDF security and signature guides, see How to Protect PDF from Editing and How to Sign PDF Digitally.