What signing an email document means

Signing an email document means adding a digital signature — a cryptographic stamp that proves you sent the message and that nobody changed it after you signed. It is not the same as typing your name at the bottom. A real digital signature uses encryption to create a unique code tied to your identity and the exact content of the email.

When you digitally sign an email, the recipient can verify that the message came from you and that every word, number, and attachment remains exactly as you sent it. If someone tries to alter even one character after you sign, the signature breaks and the recipient sees a warning. This matters for contracts, financial documents, legal notices, and anything else where proof of origin and integrity matters.

Most email programs do not sign messages by default. You have to set it up first, then choose to sign each message you send. The process differs depending on whether you use Outlook, Gmail, Apple Mail, or another email client, and whether your organization has already installed the necessary certificates.

Key Takeaways

  • Digital signatures require a certificate installed on your computer or account — you cannot sign without one, and your organization or a certificate provider must issue it to you first.
  • Outlook, Gmail, and Apple Mail all support digital signatures, but the setup process is different for each one, and some require your organization to enable the feature.
  • After you sign a document, the recipient will see a notification that the message is signed, and their email program will verify the signature automatically.
  • A broken or invalid signature means either the message was altered after you sent it, or the recipient's email program cannot verify your certificate — either way, it is a warning sign.

Get a digital certificate before you start

You cannot sign anything without a digital certificate installed on your device. A certificate is a file that proves your identity to the email system. Your organization may have already issued one to you, or you may need to request one from your IT department or from a public certificate authority.

If you work for a company, school, or government agency, ask your IT support team whether they have issued you a certificate. They will tell you whether it is already on your computer or whether you need to download and install it. If your organization does not provide certificates, you can purchase one from a public provider like DigiCert, Sectigo, or GlobalSign, though this costs money and is rarely necessary for personal email.

Before you proceed with any of the steps below, confirm that your certificate is installed. If you try to sign without one, your email program will tell you no certificate is available, and you will have to stop and get one first.

Signing in Outlook on Windows

Open Outlook and start a new email message. Click the File tab at the top left, then look for Trust Center or Options depending on your Outlook version. In the left sidebar, click Trust Center, then Trust Center Settings. Click Email Security on the left.

Under the Digitally sign outgoing messages section, check the box next to Sign outgoing messages. If you want every message you send to be signed automatically, also check Send clear text signed message when sending signed messages. This ensures recipients using older email programs can still read your signed messages. Click OK and close the settings.

Now when you compose a new message, Outlook will sign it automatically before sending. You will see a small icon or notification confirming the message is signed. If you want to sign only certain messages instead of all of them, uncheck the automatic option and look for a Sign button in the message toolbar when you compose — it usually appears in the Options tab.

Signing in Gmail

Gmail does not have a built-in digital signature feature the way Outlook does. Instead, you can use S/MIME (Secure/Multipurpose Internet Mail Extensions) if your organization has set it up for your account. Ask your IT department whether S/MIME is enabled for your Gmail account.

If it is enabled, open Gmail and click the gear icon in the top right, then select Settings. Click the Advanced tab and scroll down to find S/MIME. Click Enable S/MIME. You will see a dropdown menu asking you to select a certificate. Choose the certificate you want to use for signing.

Once S/MIME is enabled, compose a new message. You will see a lock icon near the bottom of the compose window. Click it to see options for signing and encrypting. Check the box next to Sign. Gmail will sign the message before you send it. The recipient will see a notification that the message is signed and verified.

Signing in Apple Mail

Open Apple Mail and go to Mail in the menu bar, then click Preferences. Click the Accounts tab and select the email account you want to sign messages from. Click Account Information at the top.

Look for a section called Digital Signature or Certificate. Click the dropdown menu and select your certificate from the list. If no certificate appears, your certificate is not installed on this Mac. Once you select a certificate, close Preferences.

When you compose a new message in Apple Mail, look in the menu bar for Message. Click it and select Sign. A checkmark will appear next to the option, showing the message is signed. Send the message as usual. The recipient will see a blue banner or icon indicating the message is digitally signed.

What the recipient sees when you sign

When someone receives an email you have signed, their email program automatically checks the signature. If the signature is valid, they see a notification — usually a blue banner, a lock icon, or a checkmark — saying the message is signed and verified. This tells them the message came from you and has not been changed.

If the signature is broken or invalid, they see a warning instead. This can happen if the message was altered after you sent it, if their email program does not recognize your certificate, or if there was a technical problem during transmission. A broken signature does not mean the message is dangerous — it just means the recipient cannot verify it came from you unchanged.

Some email programs show more detail than others. Outlook displays the signer's name and the time the message was signed. Gmail shows a checkmark and the certificate information. Apple Mail shows a lock icon. Regardless of the program, the recipient can always see whether the signature is valid.

Troubleshooting when signing does not work

If you try to sign a message and nothing happens, the most common reason is that no certificate is installed on your device. Check with your IT department or certificate provider to confirm your certificate is there. You can also check your email program's certificate settings — if the dropdown menu is empty, you definitely need a certificate first.

If your certificate is installed but signing still fails, try restarting your email program. Sometimes the program does not recognize a newly installed certificate until you close and reopen it. If that does not work, check whether your email program is up to date. Older versions of Outlook, Gmail, or Apple Mail may not support digital signatures, or may have bugs that prevent signing from working.

If the recipient says your signature is broken or invalid, ask them to check whether their email program is up to date. Older programs sometimes cannot verify newer certificates. You can also ask them to forward the message to your IT department so they can investigate whether the certificate itself has a problem.

Frequently Asked Questions

Do I have to sign every email I send?

No. You can set up automatic signing so every message is signed, or you can sign only certain messages. Most people sign only documents that need proof of origin — contracts, financial records, legal notices — and leave regular emails unsigned. Check your email program's settings to choose automatic or manual signing.

Can I sign an email on my phone?

Most phone email apps do not support digital signatures. Outlook on iPhone and Android can sign messages if your organization has set up S/MIME, but Gmail on mobile does not support signing. If you need to sign something, use your computer instead. Check with your IT department about what options are available on mobile devices.

What if the recipient's email program does not support digital signatures?

They will still receive the message, but they may not see the signature verification. Some older email programs simply ignore the signature and show the message as normal. The message itself is not affected — only the verification is lost. You can ask them to upgrade their email program or use a different one that supports S/MIME or digital signatures.

Is a digital signature the same as a handwritten signature?

No. A digital signature is a cryptographic code that proves identity and prevents tampering. A handwritten signature is just an image. Digital signatures are legally stronger because they cannot be forged the way a handwritten signature can. However, laws vary by country and industry about which type of signature is required for contracts and legal documents.

What happens if someone tries to change my signed email?

The signature will break immediately. The recipient's email program will show a warning that the message has been altered and the signature is no longer valid. This is the whole point of digital signatures — they prove that nothing has changed since you sent the message. If someone modifies even one character, the signature fails.