A signature ID is any unique marker that connects a specific person or organization to a document, transaction, or agreement. It can be a handwritten name in ink, an electronic sound or symbol attached to a record, or a cryptographic key pair used to secure digital communications. Under federal law, electronic versions carry the same legal weight as pen on paper when certain conditions are met.
The Three Main Forms
Signature IDs fall into three families, and the differences matter because they affect how the signature is created, how it is verified, and how hard it is to forge.
Handwritten Signatures
The oldest form is a person’s distinctive script, written in ink. Its reliability comes from individual motor habits: pen pressure, letter spacing, and stroke patterns that are difficult to replicate exactly. For centuries, a handwritten name has served as proof of both identity and intent.
Electronic Signatures
An electronic signature is broader than most people assume. Federal law defines it as any electronic sound, symbol, or process attached to or associated with a record, executed by a person with the intent to sign.1Office of the Law Revision Counsel. 15 USC 7006 – Definitions Typing your name into a form field, clicking an “I Agree” button, or drawing your name on a tablet screen all qualify. The common thread is intent: you meant to sign, and the method captures that intent electronically.
Digital Signatures
A digital signature is a more secure subset of electronic signatures. It uses public key infrastructure, where two mathematically linked cryptographic keys work together. Your private key, which only you hold, creates the signature. Anyone with the corresponding public key can verify the signature came from you and confirm the document has not been altered since you signed it. Because the math behind the keys makes forgery computationally impractical, digital signatures offer stronger proof of both identity and document integrity than a simple typed name or click.
The distinction matters in practice. An electronic signature says someone signed. A digital signature proves, mathematically, who signed and that the content has not changed.
Legal Recognition
Two frameworks give electronic and digital signatures their force in the United States. The Electronic Signatures in Global and National Commerce Act, usually called the ESIGN Act, sets the baseline: a signature or contract cannot be denied legal effect solely because it exists in electronic form.2Office of the Law Revision Counsel. 15 USC 7001 – General Rule of Validity The statute reaches any transaction affecting interstate or foreign commerce, which covers nearly all commercial activity.
The Uniform Electronic Transactions Act, known as UETA, fills in at the state level. Forty-nine states plus the District of Columbia have adopted some version of it, producing a largely consistent set of rules across the country. Together, ESIGN and UETA mean that an electronically signed lease, employment agreement, or purchase contract is generally just as enforceable as one signed with a pen.
What Makes an Electronic Signature Legally Valid
Not every click or keystroke binds the signer. Three core requirements run through both ESIGN and UETA:
- Intent to sign. The person must have deliberately chosen to apply their electronic mark. An accidental button press or a system that auto-populates a name field without the person’s knowledge does not qualify.
- Association with the record. The signature must be clearly connected to the specific document being signed, and the signer must know what they are agreeing to.
- Consent to electronic dealings. All parties must agree to conduct business electronically. The ESIGN Act explicitly states that no one can be forced to accept electronic records or signatures.2Office of the Law Revision Counsel. 15 USC 7001 – General Rule of Validity
That third requirement trips up businesses more often than you would expect. If a customer has not agreed to receive documents electronically, delivering a contract by email and collecting a digital signature may not hold up.
Consumer Consent Rules
When a law requires that information be given to a consumer in writing, delivering it electronically is permitted only if the consumer first gives affirmative consent. Before that consent, the business must tell the consumer, in a clear and conspicuous statement: that they have the right to receive the information on paper, that they can withdraw consent at any time, what consequences withdrawal might carry, whether the consent covers just the current transaction or an ongoing relationship, and how to request a paper copy after consenting.2Office of the Law Revision Counsel. 15 USC 7001 – General Rule of Validity
The business must also disclose the hardware and software the consumer needs to access and keep the electronic records. The consent process itself must reasonably demonstrate that the consumer can actually open documents in the format being used. If the required technology changes later in a way that could prevent the consumer from viewing records, the business must notify them again and allow a free withdrawal of consent.
Where Electronic Signatures Do Not Work
The ESIGN Act carves out several categories of documents where an electronic signature is not a valid substitute for a handwritten one. Getting this wrong can invalidate the entire document.
- Wills, codicils, and testamentary trusts. Estate planning documents must be signed under state probate law, which almost universally requires a physical signature and witnesses.
- Family law matters. Adoption papers, divorce decrees, and related documents are excluded under state family law rules.
- Certain Uniform Commercial Code transactions. Negotiable instruments, letters of credit, investment securities, and secured transactions governed by the UCC (other than Articles 2 and 2A, which cover sales and leases of goods) fall outside ESIGN’s reach.
- Court documents. Orders, notices, briefs, pleadings, and other filings required in connection with court proceedings.
- Critical consumer notices. Cancellation of utility services, notices of default or foreclosure on a primary residence, cancellation of health or life insurance benefits, and product recall notices.
- Hazardous materials documentation. Paperwork required to accompany the transport of hazardous materials, pesticides, or other dangerous substances.3Office of the Law Revision Counsel. 15 USC 7003 – Specific Exceptions
State laws may add further exclusions beyond this federal list.
How Each Type Is Verified
Verification depends on the kind of signature in question.
Digital signatures are the easiest to verify because the math does the work. When you open a digitally signed document, software automatically checks whether the cryptographic signature matches the signer’s public key and whether the document has been altered. A Certificate Authority, a trusted third party, issues a digital certificate binding the public key to a specific person or organization. If the certificate is valid and the signature checks out, you have strong assurance of both identity and document integrity.
Simpler electronic signatures do not use cryptography, so their reliability depends on the audit trail the signing platform creates. A well-designed system records the timestamp of the signature, the signer’s IP address, device information, email address, and sometimes the sequence of pages viewed before signing. That trail links the signature to a specific person at a specific moment. The richer the audit trail, the harder it is for someone to credibly deny signing.
Courts have generally held that simply denying you signed is not enough to defeat an electronic signature backed by a reliable platform. The challenger needs to show something actually went wrong, such as a system malfunction, unauthorized account access, or a flaw in the platform’s authentication procedures. Once the party relying on the signature produces evidence of a secure process and a clean audit trail, the burden shifts.
For handwritten signatures, forensic document examiners analyze characteristics like pen pressure, stroke direction, letter formation, and overall rhythm, comparing the questioned signature against known samples. It is not an exact science, and examiners sometimes disagree, but forensic analysis remains the standard method for resolving disputes over physical signatures.
Penalties for Forging or Misusing a Signature
Using someone else’s signature without permission is treated seriously under both state and federal law. Fraudulently using another person’s identifying information, including their signature or other unique identifiers, to commit or facilitate unlawful activity can carry up to 15 years in prison when the offender obtains $1,000 or more in value, and up to 5 years otherwise.4Office of the Law Revision Counsel. 18 USC 1028 – Fraud and Related Activity in Connection With Identification Documents, Authentication Features, and Information
Aggravated identity theft, which applies when someone uses another person’s identifying information during the commission of a separate felony, carries a mandatory two-year prison sentence that runs on top of whatever sentence the underlying felony produces. Courts cannot reduce the sentence for the underlying crime to offset this addition, and probation is not available.5Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft If the forgery facilitates terrorism, penalties can rise to 30 years for domestic or international terrorism-related offenses.
Beyond criminal liability, a forged signature on a contract typically makes the contract voidable by the person whose signature was faked. State forgery statutes add their own penalties, and civil damages caused by a forged signature can be substantial.