Quick answerA digital signature certificate (DSC) is an electronic certificate, issued under the Information Technology Act, 2000 by a Certifying Authority licensed by the Controller of Certifying Authorities, that lets a person sign electronic documents with the same legal effect as a handwritten signature. Since 2021 only Class 3 certificates are issued to individuals and organisations. A DSC is valid for one, two or three years, is stored on a secure USB token and is issued after online KYC including video verification.
- Law
- Information Technology Act 2000
- Issued by
- Licensed Certifying Authorities
- Class
- Class 3 (sign, or sign and encrypt)
- Validity
- 1, 2 or 3 years
Where you need a DSC
A DSC is compulsory or practically necessary for many government filings:
| Portal | Who needs it | What it is used for |
|---|
| MCA (Ministry of Corporate Affairs) | Directors, subscribers, company secretaries and professionals | Incorporation, annual returns, changes in directors and capital |
| GST portal | Companies and LLPs (compulsory); others may use EVC | Registration, returns, refunds and amendments |
| Income tax portal | Companies, and persons whose accounts must be audited, as the rules require | Returns, audit reports and other forms |
| E-procurement portals | Bidders in government and PSU tenders | Signing and encrypting bids |
| DGFT | Importers and exporters | IEC and export incentive applications |
| EPFO | Employer's authorised signatories | KYC approvals and transfers |
The same DSC can usually be used on several portals once registered on each. For tenders, choose a certificate with both signing and encryption, because most e-procurement systems require bids to be encrypted.
Types of DSC
The Controller of Certifying Authorities discontinued Class 2 certificates from 1 January 2021. Today the choice is about the holder and the function:
- Class 3 individual: issued to a person in their own name, used by directors, proprietors and professionals.
- Class 3 organisation: issued to a person as the authorised signatory of a company, LLP, firm or other organisation, with the organisation's name in the certificate. Needs proof of the organisation and an authorisation letter.
- Signing only, or signing and encryption: encryption is needed mainly for e-tenders.
- DGFT DSC: a certificate issued for use on the DGFT portal by importers and exporters.
Pick the right type at the start. A certificate cannot be converted from individual to organisation later, and a new one has to be bought.
How a DSC is issued
- Application: an online form with the applicant's details, choice of class, type and validity.
- KYC: identity is verified through Aadhaar-based eKYC, PAN-based verification or uploaded documents, depending on the CA's process.
- Video verification: the applicant records a short video, reading out a code shown on screen, so the CA can confirm the person is genuine. Mobile number and email are verified by OTP.
- Approval: the CA's team checks the KYC and approves the application.
- Download: the certificate is downloaded on to a FIPS-compliant USB cryptographic token, protected by a PIN set by the holder.
When the documents and video are in order, the whole process is usually completed within a few hours. The applicant must personally complete the video and OTP steps; we cannot do these on anyone's behalf, and you should never share your token PIN.
Validity, renewal and loss
DSCs are issued for one, two or three years. A certificate cannot be extended once it expires; you obtain a fresh certificate, usually with a simpler KYC if you apply through the same CA before expiry. Register the new DSC on each portal again, because portals link the specific certificate, not just your name.
If the token is lost or you believe someone else has used it, ask the CA to revoke the certificate at once. A director who leaves a company should also make sure the company's registers and the MCA records no longer associate them with filings signed after they left.
Legal effect of a digital signature
Under Sections 3 and 5 of the IT Act, an electronic record authenticated with a digital signature is legally recognised in the same way as a document signed by hand, except for the few documents excluded by the First Schedule to the Act, such as wills, negotiable instruments other than cheques, and contracts for the sale of immovable property. The holder is responsible for all documents signed with their DSC, which is why it should stay in their own custody. Companies that keep directors' tokens in the accounts office should record who uses them and for what.
Who in a business needs a DSC
- Company: every director needs a DSC to sign MCA forms, and the authorised signatory needs one for GST and income tax. The company secretary or practising professional who certifies forms uses their own.
- LLP: designated partners need DSCs for LLP forms, and the authorised signatory for GST.
- Proprietorship or partnership: a DSC is optional for most filings, which can be verified by Aadhaar OTP, but it is needed for e-tenders, DGFT and some EPFO functions.
- Individuals: taxpayers whose accounts are audited, and anyone bidding in tenders in their own name.
Each DSC belongs to one person. A company cannot have a single DSC that everyone uses; organisation certificates are still issued in the name of a specific authorised person.
Common DSC problems and fixes
- Name mismatch: the name in the DSC should match the PAN exactly. MCA and the income tax portal reject signatures where the names differ, so correct your PAN or Aadhaar first if they do not match.
- Signer utility not installed: GST, income tax and other portals need their own signing utility or browser extension running on the computer. Most signing errors come from an outdated utility or token driver.
- Old DSC still registered: after you get a new certificate, register it on every portal and remove the old one, or filings will fail.
- Wrong person registered for the business: on the GST and EPFO portals, the DSC must belong to the authorised signatory recorded on that portal. When directors or partners change, update the signatory first.
- Locked token: entering the wrong PIN several times locks the token. Depending on the token, it may need the unlock code or a new certificate.
For companies with several directors, keep a register of each director's DSC with its expiry date, and plan renewals before annual filing season when last-minute issuance is stressful.
What a DSC costs
The price depends on the class and type, the validity period, whether a new USB token is needed, and the Certifying Authority. A three-year certificate costs more than a one-year one but avoids repeat KYC. Encryption certificates for tenders and organisation certificates cost more than individual signing certificates. We quote the full price, including the token, before you apply.
If you are setting up a business, the DSC is usually the first step for company incorporation, director identification and IEC registration, so we arrange it alongside those services.
Documents you need
For a Class 3 DSC, keep these ready:
- PAN card
- Aadhaar linked to a working mobile number, for eKYC
- Recent passport-size photograph
- Active mobile number and email of the applicant
- For organisation DSC: certificate of incorporation, GST certificate or other proof of the organisation
- For organisation DSC: authorisation letter or board resolution naming the applicant
- A device with a webcam or phone camera for the video verification
How we handle it for you
Choose the right DSC
We confirm the class, type, encryption need and validity for your purpose.
Online application
We raise the application with a licensed Certifying Authority.
KYC and video
You complete eKYC, OTP and the short video from your phone or laptop.
Token delivered
The certificate is downloaded on to a USB token, delivered or handed over.
Portal registration
We help register the DSC on MCA, GST, income tax or other portals.
Why clients choose ProudLegal
Advocates who appear in courtYour matter is drafted and argued by enrolled advocates, not call-centre staff.
Company and tax filings in-houseCompany secretaries and tax professionals handle registrations and returns.
Fees agreed in writingYou receive a written fee quote before any work begins.
Updates on WhatsApp and emailEvery hearing date, filing and document is shared as it happens.
Please note: this page explains the law and procedure in general terms as on 30 October 2026. Fees, limits and timelines change, and the facts of each case matter, so take advice on your own papers before acting.
Frequently asked questions
What is a Class 3 digital signature?
It is the only category of DSC now issued to individuals and organisations in India, used for MCA, GST, income tax, e-tenders and other portals.
How long is a DSC valid?
One, two or three years, as chosen at the time of purchase.
How long does it take to get a DSC?
Usually a few hours once the KYC and video verification are complete.
Can someone else apply for a DSC on my behalf?
Someone can fill the form, but you must personally complete the OTP and video verification. The DSC is legally tied to you.
Is a DSC required for GST?
Companies and LLPs must use a DSC on the GST portal. Proprietors and others can use EVC through Aadhaar OTP.
Can a DSC be renewed?
Not in the technical sense. You obtain a new certificate before or after expiry and register it on each portal again.
What should I do if my DSC token is lost?
Ask the Certifying Authority to revoke the certificate immediately and apply for a new one.
Can one DSC be used on several portals?
Yes. A Class 3 DSC can be registered and used on MCA, GST, income tax, EPFO and other portals.
