Electronic signature vs digital signature: which one do you need?

“Just e-sign it and send it back.” Simple enough, until you realize “electronic signature” and “digital signature” get used as if they mean the same thing, and they don’t. One is a broad idea about intent. The other is a specific piece of cryptography. Knowing which you need saves you from both over-engineering a simple form and under-protecting something that mattered.

Electronic signature: the broad term

An electronic signature is any electronic mark made with the intent to sign. That’s deliberately wide. Typing your name at the bottom of an email can count. Drawing your signature with a mouse or a finger on a PDF counts. Clicking an “I agree” box can count.

What makes it a signature isn’t the technology, it’s the intent and the context: you meant to sign, and there’s a reasonable record that you did. For the vast majority of everyday agreements, this is exactly what’s being asked for. A consent form, an internal approval, a delivery receipt, a freelance contract between two people who trust each other. You don’t need anything heavier than a clear, intentional electronic signature.

Digital signature: the cryptographic kind

A digital signature is a specific, narrower thing. It uses cryptography, a digital certificate and a pair of keys, to do two jobs an ordinary electronic signature doesn’t:

• Prove who signed. The signature is tied to a certificate that identifies the signer, ideally issued by a trusted authority.
• Prove the file hasn’t changed since. If a single byte of the document is altered after signing, the signature breaks and any reader can tell. It’s tamper-evidence built into the math.

So every digital signature is an electronic signature, but not every electronic signature is digital. The digital kind adds verifiable identity and integrity on top. You’d want it where the stakes and the trust gap are higher: a contract with a party you don’t know, a legal filing, anything where someone might later dispute who signed or whether the document was altered.

A note on legal weight

Different countries have signature laws (the EU’s eIDAS, for example) that define tiers, from a basic electronic signature up to a “qualified” signature backed by a certified provider and a formal identity check. The highest tiers generally require a qualified certificate from an accredited authority, which is its own process. The practical takeaway: match the signature to the situation. Most things need a plain electronic signature. A few high-stakes documents need the cryptographic, certificate-backed kind, and sometimes a formally qualified one. Don’t assume the heaviest option is always required, and don’t assume the lightest is always enough.

Adding a signature to a PDF in your browser

For the everyday case, an intentional electronic signature on the document itself, reader.me has a signature tool that runs on your device:

1. Open the signature tool and drop your PDF in.
2. Create your signature. Draw it, or place a signature image.
3. Position it where it belongs on the page.
4. Download the signed PDF. It’s saved straight to your machine.

The whole thing happens in your browser. The document isn’t uploaded to sign it, which matters, because the things you sign, contracts, agreements, forms, are exactly the documents you’d least want sitting on someone else’s server.

Why signing locally is the right default

Here’s the irony of many online signing services: to add a signature meant to protect an agreement, you first upload the entire agreement to their servers. The most sensitive moment in a document’s life, the point where it becomes binding, is handed to a third party.

reader.me signs in the browser. The PDF is read into memory on your machine, your signature is added right there, and the signed file saves back to you. Nothing is uploaded. You can check it: open developer tools (F12), watch the Network tab while you sign, and you’ll see no traffic. Or sign a document offline, with your connection off, and watch it work anyway.

So the short answer to “which do you need?”: for most things, a clear electronic signature, added locally, is exactly right. For the high-stakes, identity-critical cases, look into a certificate-based digital signature. Either way, there’s no good reason the document should leave your machine just to get signed. Add your signature in the browser and keep it where it belongs.