Digital Signature vs Electronic Signature: What Actually Proves a Document?

"Digital signature" and "electronic signature" get used as synonyms in almost every contract negotiation. They aren't. One describes a broad legal category — any electronic mark of intent. The other describes a specific cryptographic mechanism that can prove who signed and that nothing changed afterward.

If you rely on signed documents — contracts, approvals, certificates — the difference decides what you can actually prove when it matters.

The one-paragraph version

An electronic signature is any electronic indication of intent to sign: a typed name, a drawn squiggle on a touchscreen, a pasted signature image, a click on "I agree." Broadly legally recognized (E-SIGN and UETA in the US, eIDAS in the EU), and proof of intent more than proof of identity.

A digital signature is a cryptographic operation: the document is hashed, the hash is signed with the signer's private key, and a certificate binds that key to an identity. Anyone can verify, mathematically, that the named key signed this exact document — and any later change breaks the verification visibly.

Put simply: electronic signature is a legal category. Digital signature is evidence.

Side by side

	Electronic signature	Digital signature
What it is	Any electronic mark of intent	Cryptographic signature + certificate
Identity assurance	Whatever the surrounding process gives you	Certificate-based, verifiable
Tamper evidence	None by itself	Any change breaks verification
Verification	Ask people, check logs	Independent, mathematical
Typical use	Everyday agreements, internal approvals	Regulated filings, high-value contracts
eIDAS tier	Simple	Advanced / Qualified

The middle rows are the ones that matter in a dispute. A drawn squiggle proves someone drew a squiggle; the process evidence around it (authentication, audit trail) does the real work. A valid digital signature proves the document is byte-for-byte what a specific key signed.

The trap: signature images

The riskiest pattern in day-to-day business is the signature image — a photo of a wet-ink signature pasted onto a document. It looks signed. It proves nothing, and it's the easiest element of a document to transplant: lift the image from one PDF, place it on another.

Forensically, transplanted signatures are one of the most detectable forgeries — cloned pixel regions, resolution mismatches between the signature and the page, editing traces in the file — but the better posture is not to treat pasted images as signatures at all.

What signing platforms actually give you

Mainstream e-signature platforms are a hybrid: the experience is an electronic signature (click, draw, type), while the platform seals the completed document with its own digital signature and maintains an audit trail. That seal makes post-completion tampering detectable — genuinely valuable — but note whose signature it is: the platform's, attesting to its process. Signer identity is still only as strong as the authentication used (an emailed link is not a notary).

When each is enough

Everyday commercial agreements between counterparties with a relationship? Electronic signatures with a decent audit trail are what practically everyone uses, and courts routinely accept them. Regulated submissions, high-value or adversarial contracts, long-lived certificates? That's digital-signature territory — you want proof that survives the relationship going bad.

And received documents deserve one extra question regardless of signature type: has anything changed since signing? A digitally signed PDF answers cryptographically. Anything else is a document forensics question — editing traces after the signature event, transplanted signature blocks, revision history that postdates the "signed" version.

Frequently asked questions

Is a typed name a legal signature?

In most jurisdictions and most contexts, yes — intent is what's legally required, and a typed name can express it. Whether you can later prove who typed it is the separate, harder question.

Are DocuSign-style signatures digital signatures?

The signer's mark is an electronic signature; the platform's certificate seal on the completed envelope is a digital signature. You get tamper evidence from completion onward, plus the platform's audit trail for identity.

Can a digitally signed document still be fraudulent?

Yes — cryptography proves the signed bytes haven't changed and which key signed them. It says nothing about whether the content was honest, or whether the key holder was who you believed. Trust in the certificate and the counterparty still matters.

How do I check whether a signed PDF was altered afterward?

Open the signature panel in a proper PDF reader — a broken or "invalid" signature means post-signing changes. For documents without cryptographic signatures, forensic scanning reconstructs the editing history instead.