What signing an Excel document actually does

When you digitally sign an Excel file, you're attaching a cryptographic stamp that proves two things: that the file came from you, and that nobody has changed it since you signed it. Excel doesn't encrypt the file or hide its contents — anyone can still open and read it. The signature is visible metadata that says "this person signed this, on this date, and it hasn't been tampered with since."

This matters because email and file transfers are easy to forge. A digital signature uses a certificate — a file that contains your identity information and a unique key — to create a signature that can't be faked without access to your certificate. When someone opens your signed file, their computer checks whether the signature is valid and whether the file has been altered.

Excel has two ways to sign: with a certificate from your organization (if your company or school issued you one) or with a self-signed certificate that you create yourself. A self-signed certificate proves the file hasn't been changed, but it doesn't prove who you are the way an organizational certificate does — anyone can create one and claim to be anyone.

Key Takeaways

  • You need a digital certificate before you can sign an Excel file; if your organization didn't issue one, you can create a self-signed certificate in Windows or use a third-party service on Mac.
  • Signing an Excel file proves you created it and that it hasn't been altered since you signed it, but does not encrypt or hide the contents.
  • Once you sign a file, you cannot edit it without breaking the signature; you must remove the signature, make changes, and sign again.
  • The person receiving your file needs to trust your certificate for the signature to show as valid; self-signed certificates will show a warning unless they add your certificate to their trusted list.

Getting or creating a digital certificate

If your employer or school uses digital signatures, they may have issued you a certificate already. Check with your IT department or security team — they can tell you whether you have one and where to find it. Organizational certificates are stored on your computer or on a smart card, and Excel will find them automatically when you go to sign.

If you don't have an organizational certificate, you can create a self-signed one. On Windows, open the Start menu and search for "Create a self-signed certificate". This opens a command-line tool that generates a certificate and stores it on your computer. You'll be asked to provide a name for the certificate — use something you'll recognize, like "My Documents" or your full name. The certificate is then available in Excel whenever you want to sign a file.

On Mac, you cannot create a self-signed certificate through Excel's built-in tools. Your options are to use a third-party certificate service (which may charge a fee), ask your organization for a certificate, or use a different method to prove the file's authenticity, such as password-protecting it or using a file-signing service like DocuSign or Adobe Sign.

Signing a file in Excel

Open the Excel file you want to sign. Go to the File menu, then select Info. Look for a button or link that says Protect Document or Add a Digital Signature — the exact wording varies by Excel version. Click it.

A dialog box will open asking you to select a certificate. If you created a self-signed certificate, it will appear in the list. Select it and click OK. You'll be asked to enter a reason for signing (optional, but useful for your own records) and to confirm. Once you click Sign, the signature is attached to the file.

Excel will show you a confirmation that the file has been signed. The file now contains your digital signature, and the signature will remain valid as long as the file is not changed. If you need to edit the file later, you'll have to remove the signature first — Excel will prompt you when you try to edit a signed file.

What happens when someone opens your signed file

When another person opens your signed Excel file, Excel checks the signature automatically. If the signature is valid and the file hasn't been changed, Excel shows a message saying the file is signed and trusted (if the certificate is recognized) or shows a warning (if the certificate is self-signed or unknown).

For an organizational certificate, the person receiving the file will see a green checkmark or "Signature Valid" message if their computer recognizes your organization's certificate authority. For a self-signed certificate, they'll see a warning that the signature cannot be verified. They can still open and use the file, but they won't have proof that it came from you unless they've added your certificate to their trusted list.

If someone changes the file after you sign it — even by one character — the signature becomes invalid. Excel will show a warning that the file has been modified since it was signed. This is the main value of signing: it proves the file is exactly as you left it.

Removing a signature if you need to edit the file

Signed files are locked against editing. If you try to change anything in a signed Excel file, Excel will ask whether you want to remove the signature. Click Yes to remove it, make your changes, and then sign the file again if needed.

You can also remove a signature without editing. Go to File > Info > Protect Document and look for an option to remove or delete the signature. The exact menu path depends on your Excel version, but the option is always in the protection or signature area.

When self-signed certificates aren't enough

Self-signed certificates work for proving a file hasn't been changed, but they don't prove who you are. If you're sending documents to clients, partners, or anyone outside your organization who needs proof of your identity, a self-signed certificate won't be trusted. They'll see a warning and have no way to verify you actually signed it.

For situations where identity matters, you have two options. First, ask your organization for a certificate — many companies issue them to employees who regularly sign documents. Second, use a third-party signing service like DocuSign, Adobe Sign, or HelloSign. These services verify your identity and provide a signature that recipients can trust. They typically charge per document or per month, but they're the standard for legal, financial, and formal business documents.

Frequently Asked Questions

Can I sign an Excel file on my phone or tablet?

Excel on mobile devices (iOS and Android) does not support digital signatures. You must use Excel on a Windows or Mac computer to sign a file. If you need to sign on the go, consider using a third-party signing service that has a mobile app, such as DocuSign or Adobe Sign.

What if the person I'm sending the file to doesn't trust my self-signed certificate?

They can add your certificate to their trusted list, but this requires you to send them your certificate file separately and them to install it on their computer — a process most people won't do. For regular document signing with people outside your organization, a third-party service is more practical.

Does signing an Excel file password-protect it?

No. A digital signature proves the file hasn't been changed and (with an organizational certificate) proves who signed it, but it does not encrypt the file or prevent someone from opening it. If you need to restrict who can open the file, use Excel's password protection feature separately from signing.

Can I sign a file that's already been signed by someone else?

Yes. Multiple people can sign the same file, and each signature remains valid as long as the file isn't changed after that person signs. Excel will show all signatures and the order in which they were added. This is common for approval workflows where a document needs signatures from multiple people.

What if I lose access to my certificate?

If you created a self-signed certificate on your computer and that computer fails, you lose the certificate and cannot create matching signatures on a new computer. Organizational certificates are usually backed up by your IT department, so contact them if you switch computers. For important signing, ask your organization whether they back up certificates or can reissue one.