> For the complete documentation index, see [llms.txt](https://docs.emudhradigital.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.emudhradigital.com/help-center/faqs/esign-basics.md).

# eSign Basics

Answers based on the CCA eSign FAQ, with eMudhra-specific notes.

<details>

<summary>What is eSign?</summary>

eSign is an online electronic signature service that lets a person digitally sign a document after eKYC authentication (OTP, biometric or face). No USB token is needed, and certificate issuance and signing take only seconds.

</details>

<details>

<summary>Where can eSign be used?</summary>

Any Application Service Provider (ASP) can integrate eSign to replace paper forms — for example government departments, banks, financial institutions, insurers and educational institutions. Typical uses include DigiLocker self-attestation, tax filings, account opening, loan agreements, certificates and HR documents.

</details>

<details>

<summary>Is an eSign signature legally valid?</summary>

Yes. eSign operates under the Second Schedule of the Information Technology Act, 2000 and the Electronic Signature or Electronic Authentication Technique and Procedure Rules, 2015, and is legally equivalent to a handwritten signature for transactions permitted under the Act. Documents excluded by the First Schedule of the IT Act (for example wills, powers of attorney, trusts and sale deeds of immovable property) cannot be eSigned.

</details>

<details>

<summary>Does eSign replace traditional Digital Signature Certificates (DSC)?</summary>

No. Token-based DSCs continue to exist alongside eSign. Each ASP decides whether eSign suits its application. eMudhra offers both, plus Remote Key Storage for long-term remote certificates.

</details>

<details>

<summary>How is eSign different from a traditional DSC?</summary>

With a DSC, the user applies to a CA, manages their own key and the certificate is valid for 1–3 years. With eSign, the key pair is generated, certified and used immediately after authentication and then destroyed; the certificate is valid for only 30 minutes.

</details>

<details>

<summary>Is my privacy protected?</summary>

Yes. Only a one-way hash of the document is sent to eMudhra — never the document itself. A fresh key pair and certificate are created for each signature.

</details>

<details>

<summary>Who provides eSign?</summary>

eSign is provided by CCA-licensed Certifying Authorities empanelled as eSign Service Providers (ESPs). eMudhra is one of them. The current list is on the CCA website.

</details>

<details>

<summary>Who can integrate eSign?</summary>

Government bodies, statutory authorities, banks, financial institutions, telecom companies and other legal entities registered in India can integrate eSign as ASPs. Organisations that do not want to integrate can use eSign through emSigner.

</details>

<details>

<summary>What does a signer need?</summary>

For eSign v2: an Aadhaar number (or Virtual ID) with a registered mobile for OTP, or a supported biometric/face capture method. For eSign v3: an eMudhra eKYC account, created once using offline Aadhaar, PAN, bank KYC or organisational KYC.

</details>

<details>

<summary>What certificate classes are used?</summary>

eKYC-OTP (single factor) and eKYC-Biometric (multi factor), depending on the authentication method used.

</details>

<details>

<summary>How long is an eSign certificate valid? Can it be revoked?</summary>

30 minutes. Because the private key is destroyed immediately after signing and the certificate expires quickly, revocation is not needed.

</details>

<details>

<summary>Can any content be signed?</summary>

The signer can sign only what the ASP's application presents. The document description (up to 50 characters) and, for eSign v3, a document link are shown to the signer before consent.

</details>

<details>

<summary>Can an ASP use more than one ESP?</summary>

Yes. An ASP may integrate several ESPs and route transactions between them.

</details>

<details>

<summary>Who archives signatures and logs?</summary>

Both the ESP and the ASP archive their own records. eMudhra retains transaction evidence (including Form C) for at least 7 years.

</details>

<details>

<summary>How much does eSign cost?</summary>

Pricing depends on volume and plan. See [Plans and Billing](file:///2005158/B-Plans-and-Billing/eSign%20Plans%20Overview.md).

</details>