Electronic signature vs digital signature: what's the difference?
Short answer: they aren't opposites. "Electronic signature" is the broad legal concept — any mark, sound, or symbol made on a record with the intent to sign it. "Digital signature" is a specific cryptographic technology (public-key infrastructure, hashing, certificates) that's often used to secure an electronic signature and prove a document hasn't changed. One is a legal category; the other is the math underneath it.
Because the terms get used interchangeably in marketing, people assume they're competing options. They're not. A digital signature is one of the tools that makes an electronic signature trustworthy.
What an electronic signature is
An electronic signature (e-signature) is defined by law, not by technology. Under the U.S. ESIGN Act and UETA, it's "an electronic sound, symbol, or process attached to or logically associated with a record and executed or adopted by a person with the intent to sign." That's deliberately broad. It covers:
- Typing your name into a form and clicking "I agree"
- Drawing your signature with a mouse, finger, or stylus
- Pasting an image of your handwritten signature
- Clicking a button that records your intent to be bound
What makes it legally valid isn't the visual mark — it's the intent to sign, the signer's consent to do business electronically, the association of the signature with the record, and a retained record of the transaction. We cover all four in detail in Are electronic signatures legally binding?
What a digital signature is
A digital signature is a narrower, technical thing: a cryptographic mechanism for verifying the authenticity and integrity of a digital message or document. It relies on public-key infrastructure (PKI):
- A hash (a fixed-length fingerprint, commonly SHA-256) is computed from the document's contents.
- That hash is encrypted with the signer's private key to create the digital signature.
- Anyone with the matching public key (often bound to a digital certificate from a certificate authority) can verify the signature and confirm the document hasn't been altered.
If even one character of the document changes after signing, the hash no longer matches and the signature breaks. That's what makes a digital signature tamper-evident. The technology says nothing, by itself, about whether a contract is legally binding — it's about integrity and identity, not intent.
Electronic signature vs digital signature: side by side
| Electronic signature | Digital signature | |
|---|---|---|
| What it is | A legal concept — any electronic mark made with intent to sign | A cryptographic technology (PKI, hashing, certificates) |
| Primary purpose | Capture a person's intent to agree to a record | Verify document integrity and signer identity |
| Governed by | Laws: ESIGN, UETA (US), eIDAS (EU) | Standards: PKI, X.509 certificates, hash algorithms |
| What it proves | Someone intended to sign | The document hasn't changed and ties to a key/certificate |
| Examples | Typed name, drawn signature, "I agree" click | SHA-256 hash signed with a private key |
| Relationship | The broad category | A technology used to secure e-signatures |
How they fit together
Think of it as legal validity versus technical assurance. A simple typed-name e-signature can be perfectly binding under the law. But if it's ever disputed, you want evidence the document wasn't altered and that you can reconstruct who did what, when. That's where cryptographic techniques — hashing and tamper-evidence — earn their keep. The strongest setup combines both: a clear, intentional electronic signature and a cryptographically protected record behind it.
This is also why "digital signature" shows up in the EU's eIDAS tiers. Everyday signing produces a simple electronic signature (SES), which is admissible across the EU. Higher tiers — Advanced (AES) and Qualified (QES) — layer on stricter PKI-based identity and certificate requirements, and are available as add-ons when a transaction calls for them.
Where GSD fits
GSD provides legally binding electronic signatures that are ESIGN and UETA compliant, backed by cryptographic tamper-evidence. When a document is completed, GSD captures a full audit trail and seals the record:
- A SHA-256 hash of the signed document, so any later alteration is detectable
- Timestamps and IP addresses for every signer action
- A Certificate of Completion summarizing who signed, when, and from where
In other words, you get the legal substance of an electronic signature with the technical assurance people associate with a digital signature — without your signers needing to manage certificates, install software, or even create an account. For a deeper look at the evidence that makes a signature stand up, see What makes an audit trail court-admissible.
Under eIDAS, GSD signatures are recognized as simple electronic signatures (SES); Advanced (AES) and Qualified (QES) signatures are available via add-ons.
Ready to send a document the right way? Create a free GSD account — upload a PDF, drop in fields, and send it for signing in minutes. Questions about plans or compliance? See pricing or our FAQ.
This article is general information, not legal advice. Whether a particular electronic or digital signature is enforceable depends on your jurisdiction, the type of document, and the facts of your transaction. Consult a qualified attorney for advice on your specific situation.