Is this PDF
really signed?
Someone sent you a letter, an offer or a certificate. VeriPatra checks the secret maths behind its signature and tells you — in plain words — whether you can trust it.
or paste a link · up to 20 MB · checked in seconds
Four steps, one plain answer.
No jargon on this page. If you can read a bus ticket, you can read a VeriPatra result.
Pick a PDF, or share it straight from WhatsApp or email.
Every signed PDF carries a number made from the whole file.
Who signed it? Is the number still correct? Did anything change?
One sentence first. The full working is one click away.
What is a digital signature?
Three ways to say "this is really from me". Only one of them can prove the paper did not change afterwards.
A picture of your name. Anyone who has seen it once can copy it onto a different page — and the page will not complain.
Better: you can see if someone broke it open. But anyone holding the same stamp can make the same seal, and a scan of a seal is just a picture again.
The computer squeezes the whole file into one long number, then locks that number with a private key only the signer has. Change one comma and the number stops matching.
This is why VeriPatra tells you clearly when a mark on a page is only ink. An ink signature is a picture of a signature — useful, but it is not the same thing as a cryptographic one.
What a trust score means
Every check produces one number out of 100, and VeriPatra turns that number into a risk level. Here is exactly where the lines fall.
A high score is not permission to relax. The score summarises the checks; the verdict above it is what you act on. If VeriPatra cannot reach the verification service, it says "could not check" — it never guesses a number.
Eight questions, asked every time
This is the real checklist from the app — same wording, same order. Every line is either answered or honestly marked "not checked".
The locked number opens with the signer's public key.
Re-squeeze the file, compare the numbers.
Includes the Government of India CCA trust roots.
Not just page one, not just a corner.
Some PDFs allow form-filling. Others allow nothing.
A certificate that had already expired proves nothing.
An independent clock, not the signer's own.
Revoked certificates are checked against the issuer.
Shown here as one example document. A missing secure timestamp is not a failure — it just means the signing time cannot be proved independently, which is why it is amber and not red.
Why ink alone is not enough online
On paper, a pen signature works because the paper is hard to change. A PDF is not paper — it can be edited perfectly, and no one can tell by looking.
| Ink signature on a PDF | Digital signature | |
|---|---|---|
| Shows who signed it | No | Yes |
| Proves the page did not change afterwards | No | Yes |
| Survives being copied onto another document | No | Yes |
| Can be checked by a stranger, years later | No | Yes |
| Recognised by Indian law for most official use | Sometimes — depends on the document | Yes, for most documents |
| Looks like a signature to the human eye | Yes | Only if one is drawn on |
Indian law recognises digital signatures for most purposes. Some instruments are excluded. Check your specific document.
If you add ink to a PDF that already carries a digital signature, the file changes and that signature stops validating — anyone who checks your copy will see "changed after signing". VeriPatra tells you before you do it, and your original stays untouched.
Now in your browser too
Sign in only when you want a Vault. Verifying, signing and protecting need no account at all — on the web exactly as in the app.
Real cryptographic checks on any signed PDF, plus a plain-language verdict you can screenshot and forward.
Draw, upload or scan your signature, cut it out of its background, and place it — with a rubber seal — anywhere on the page.
AES-256 password protection. The password is used for that one request and is never stored, so we cannot recover it either.
Encrypted copies, opened with a Vault ID you invent and a password. No email, no phone number, ever.
A history per document, a "what changed" analysis, and a court evidence bundle you can export as a ZIP.
Scan a printed document's QR, or check an Aadhaar, GST or PAN QR code entirely on your own device.
Camera QR scanning and fingerprint unlock need a phone — those two stay in the app.
Get the appUnderstand it once, and you are safe for good
Short articles in plain language. Written by us, published from our own editor — new ones appear here automatically.
The whole idea in five minutes, with pictures and no maths.
A scanned pen signature proves almost nothing on a PDF. Here is why.
The five things a real government PDF has that a forged one usually does not.
Built to be honest, not impressive
VeriPatra never shows a placeholder as if it were a real result. Every screen tells you what was checked, what was not, and why.
A PDF you verify or protect is sent over HTTPS only to do the job you asked for, processed in memory, and not kept after the request.
Verify, sign and protect without ever telling us who you are. A Vault needs only a Vault ID you invent and a password — no email, no phone number.
There are no tracking scripts on this site and no advertising SDKs in the app. We do not sell data because we do not collect it.
Share a PDF straight into VeriPatra
From WhatsApp, email or your file manager — the app appears in the share sheet. Camera QR scanning and fingerprint unlock work only here.
Free · English and हिन्दी · Android and iPhone
and unaltered