The fastest way to validate a signed PDF — online, free

A PDF validator is an online tool that checks whether a PDF file has been digitally signed and whether the signature is still trustworthy. When you upload a signed PDF here, we open the file, locate the PKCS#7 signature block inside it, re-hash the exact bytes that were signed, and compare that hash to the digest embedded in the signature. If the two match, the document has not been tampered with. We then walk the signing certificate up the chain to a licensed Indian CCA root — only then do we hand you the green tick.

Just upload your e-Aadhaar PDF above. If the file is password-protected (UIDAI e-Aadhaar usually is), a small popup will ask for your Aadhaar password — the first 4 letters of your name in CAPITAL followed by your year of birth (for example RAJU1988). We verify the UIDAI DSC issued by (n)Code Solutions, show you the signer name, and produce a downloadable copy with a green tick over the signature block.

Every Indian CCA-licensed Certifying Authority is supported out of the box: e-Mudhra, (n)Code Solutions, SafeScrypt / Sify, Capricorn, XtraTrust, VSign, IDRBT and C-DAC. On the technical side we handle standard PKCS#7 / CMS detached signatures with SHA-256 or SHA-1 digests, both single and multi-signature PDFs, and legacy ISO 32000 signature dictionaries used by Adobe Acrobat, Foxit and eOffice.

Yes. GST-Reg-06 certificates, ITR-V acknowledgements, PAN card PDFs, bank statements from HDFC / SBI / ICICI, EPFO letters and any Digilocker-issued PDF all use standard PKCS#7 signatures — our validator reads them all. If the signature parses but the CA is not in our trust store the tick turns amber (an alert rather than a full pass), so you always know exactly what to trust.

Your privacy comes first. Files stay on the server just long enough to run the verification and give you a downloadable verified copy. Every upload and every generated report is auto-deleted within two hours — the cleanup runs on a schedule so nothing lingers. We never share files with any third party and there is no analytics tracker on this page.

Yes, completely free. No signup, no watermark on the verified copy, no page limit for a normal document. If you're a large office and need bulk verification we can help with a self-hosted install — everything runs on plain PHP + OpenSSL on cPanel-grade shared hosting.

Green means two things at once: the document bytes match the signed hash and the signing certificate chains up to a trusted root. Amber means the signature parses cleanly but either the certificate chain does not end at a trusted CCA root, or one of the intermediate certificates has expired. Red means the file was modified after signing, the signature is corrupt, or there is no signature at all.

Yes. The interface is fully responsive — you can upload a PDF from your phone's file picker, WhatsApp share, Gmail attachment or Digilocker download, and view the verdict on any Android or iOS browser. The verified copy downloads straight to your phone.