Digital Signature Certificate (DSC): How to Get One in India (2026 Guide)

Digital Signature Certificate (DSC): How to Get One in India (2026 Guide)

If you have ever tried to register a company, file your GST returns, or submit an income tax return online, you have probably run into three letters that confuse almost every first-time founder: DSC. It sounds technical and intimidating, but it is really just your legally valid digital "signature" that proves it is really you clicking submit on that government portal.

The tricky part is that most people only discover they need a DSC at the worst possible moment — right when they are mid-way through incorporating their company or about to miss a filing deadline. This guide breaks down exactly what a DSC is, who needs one, how to get it without running into avoidable delays, and what it costs in 2026.

What is a Digital Signature Certificate (DSC)

A Digital Signature Certificate is an electronic equivalent of your physical, handwritten signature, issued in a secure digital format. It is stored either on a USB token (a small encrypted device that looks like a pen drive) or, in some newer setups, issued in a cloud-based or token-less format depending on the Certifying Authority.

A DSC is issued by a licensed Certifying Authority (CA) such as eMudhra, Capricorn, or similar government-approved agencies, after completing your identity verification (KYC) and a live video verification process. Once issued, it lets you sign documents electronically on portals like the Ministry of Corporate Affairs (MCA), the GST portal, the Income Tax e-filing website, and various other government systems — and that signature is legally binding, just like an ink signature on paper.

For business purposes, you will almost always need a Class 3 DSC. Earlier there used to be Class 2 certificates too, but regulatory changes have phased those out for most business and compliance use cases, so Class 3 is now the standard for company incorporation, GST registration, tenders, and e-filing. A Class 3 DSC comes in two flavours: "signature only" (for filings and forms) and "signature and encryption" combined (needed if you are participating in e-tenders or e-procurement portals that require encrypted document exchange).

Why a DSC Matters for Your Business

Think of your DSC as the digital key that unlocks nearly every important compliance action your business needs to take. Without it, several critical processes simply cannot move forward.

• Company and LLP incorporation: Every proposed director or designated partner must have a valid DSC to sign the SPICe+ incorporation forms filed with the MCA.
• Annual filings: Your company's annual returns, financial statements, and other MCA forms need to be digitally signed by a director and, in most cases, by a practicing professional.
• GST registration and returns: Businesses registered as companies or LLPs are generally required to sign GST filings using a DSC rather than an OTP-based signature.
• Income tax filings: Companies and certain categories of individuals (like those whose accounts require audit) must verify their income tax returns using a DSC.
• Trademark and IP filings, tenders, and e-auctions: Many of these government and quasi-government platforms only accept applications signed with a valid Class 3 DSC.

Simply put, if you plan to run a registered business in India, a DSC is not optional — it is foundational infrastructure, much like a PAN card or a bank account.

Who Needs a DSC (Eligibility)

A DSC can be obtained by individuals as well as organisations, and different people in your business ecosystem will need one at different points:

• Proposed directors of a new Private Limited Company or OPC, before they can be appointed and before incorporation forms can be filed.
• Designated partners of an LLP, for the same reason.
• Existing directors and authorised signatories, whenever the company needs to file annual returns, resolutions, or other MCA forms.
• Proprietors and partners of a proprietorship or partnership firm, if they wish to sign GST returns, income tax filings, or other government forms digitally instead of using an Aadhaar OTP or EVC where permitted.
• Chartered Accountants, Company Secretaries, and other professionals, who need to digitally certify and co-sign statutory filings on behalf of their clients.
• Foreign nationals and NRIs who are being appointed as directors in an Indian company can also obtain a DSC, though the documentation and attestation requirements are more elaborate — typically involving notarisation and apostille of identity and address proof from their home country.

If you fall into any of these categories and do not already hold a valid, unexpired DSC, this is usually one of the very first things you should sort out before starting an incorporation or compliance process.

Documents Required for a Class 3 DSC

The exact document list can vary slightly between Certifying Authorities, but broadly, you will need to keep the following ready:

1. PAN card of the applicant (mandatory for Indian nationals).
2. Aadhaar card or another government-recognised photo ID and address proof (passport, voter ID, driving licence).
3. A recent passport-size photograph.
4. A valid mobile number and email ID registered in the applicant's own name — these are used for OTP verification during the video KYC step.
5. For foreign nationals/NRIs: a notarised and apostilled copy of the passport, along with an apostilled address proof, since Indian government-issued ID proofs are usually unavailable to them.
6. Organisation documents (if the DSC is being issued in the applicant's capacity as a company representative): certificate of incorporation, board resolution or authorisation letter, and organisational PAN, depending on the CA's requirements.

It is worth double-checking the current document checklist with your Certifying Authority or your compliance advisor, since CAs occasionally revise their KYC requirements in line with updated regulatory guidelines.

Step-by-Step Process to Get a DSC

Getting a Class 3 DSC is a fairly quick process if your paperwork is in order. Here is how it typically works:

1. Choose a licensed Certifying Authority. Pick a CA that is authorised under the Information Technology Act framework — common names include eMudhra and Capricorn, among a few others.
2. Fill out the DSC application form on the CA's website or through an authorised registration agent, entering your personal details, class of certificate (Class 3), and validity period (typically 1, 2, or 3 years).
3. Upload identity and address proof documents as listed above, in the specified format and size.
4. Complete the video verification step. This usually involves a short live video call or a recorded video KYC where you show your original ID documents and confirm your identity in real time — this step has become mandatory to curb fraudulent DSC issuance.
5. Verify via OTP sent to your registered mobile number and email ID, confirming that these contact details genuinely belong to you.
6. Make the payment for the DSC issuance fee based on the validity period and type (signature-only or signature-and-encryption) you have chosen.
7. Receive your DSC. Once your KYC is verified and approved, the CA issues the DSC, which is then downloaded onto a USB token or the applicable secure medium. Some CAs now offer cloud-based signing tokens that do not require a physical USB device.
8. Install the DSC utility software on your computer and register the DSC on the relevant portal (MCA, GST, income tax e-filing) so it can be used for signing forms.

If any document is unclear, mismatched (for instance, your name spelled differently across PAN and Aadhaar), or your video KYC gets flagged, your application can get stuck in a loop of resubmissions — which is exactly the kind of delay founders can't afford when they are racing an incorporation deadline.

Cost & Fees for DSC in 2026

DSC pricing depends on the Certifying Authority, the validity period you choose, and whether you need a signature-only or a combined signature-and-encryption certificate. As a broad reference:

• A 1-year Class 3 DSC (signature only) is generally priced in the range of a few hundred to about a thousand rupees for the certificate itself.
• 2-year and 3-year validity options cost proportionately more but often work out cheaper per year than renewing annually.
• Combined signature-and-encryption DSCs (needed for tenders and e-procurement) usually cost more than signature-only ones.
• There may be additional charges for the USB token/hardware device if you do not already own one, plus service or handling fees if you go through an authorised agent or a compliance service provider instead of applying directly.

These figures move around periodically, so please verify the current rate with your Certifying Authority or your compliance partner before making a payment. Avoid any vendor quoting an unusually low price with no video KYC — this is often a red flag for a non-compliant issuance process.

Timeline: How Long Does It Take

For most applicants with clean, matching documents, a Class 3 DSC can be issued within a few hours to 1-2 business days after the video KYC is completed and verified. Delays typically arise from:

• Mismatched details between PAN, Aadhaar, and the application form.
• Poor video/audio quality during the live KYC call.
• Missing notarisation or apostille for foreign national/NRI applicants, which can add several days to a couple of weeks depending on the applicant's home country processes.
• Backlogs at the Certifying Authority during peak filing seasons (such as around the annual ROC filing deadlines).

If you are planning an incorporation or a time-sensitive filing, it is wise to get your DSC sorted at least a few days in advance rather than leaving it for the last moment.

DSC Classes and Validity: Key Distinctions

It helps to understand a few distinctions that often confuse first-time applicants:

• Class 2 vs Class 3: Class 2 DSCs have been phased out for most practical purposes; Class 3 is now the universal standard offering a higher level of identity assurance, required for MCA, GST, income tax, and tender filings.
• Signature-only vs Signature-and-encryption: A signature-only DSC is sufficient for signing forms and returns. A combined certificate is needed only if you are dealing with encrypted document exchange, such as government e-tenders.
• Individual DSC vs Organisation DSC: An individual DSC is issued in a person's own name and used for personal filings (ITR, personal MCA forms). An organisation DSC additionally reflects the entity's name and is used when signing on behalf of a company, though the underlying certificate is still tied to an authorised individual.
• Token-based vs cloud-based DSC: Traditionally, DSCs are stored on a physical USB token for security. Some CAs now also offer cloud-based or HSM-based signing that skips the physical token, though acceptance varies by portal, so check compatibility with the specific government website you plan to use it on.
• Validity period: DSCs are typically valid for 1 to 3 years and must be renewed before expiry — an expired DSC will simply stop working, and you will need to go through the issuance process again.

Common Mistakes to Avoid

• Waiting until the last minute. Founders often start their DSC application only after realising the incorporation form cannot be filed without it, turning a routine step into a bottleneck.
• Mismatched name/spelling across documents. Even a small difference between how your name appears on your PAN and Aadhaar can cause your KYC to be rejected.
• Using an old, outdated address or mobile number that no longer matches your current details, causing OTP or verification failures.
• Not renewing on time. Many directors get caught off guard when their DSC expires right before a critical annual filing deadline, leading to late fees or penalties on the underlying filing.
• Losing the USB token or forgetting its password, which then requires a fresh issuance rather than a simple recovery in most cases.
• Choosing the wrong class or type of certificate, such as opting for signature-only when the intended use (like e-tenders) actually requires signature-and-encryption.
• Going with unverified, low-cost agents who skip proper KYC steps — this can lead to the DSC being blocked or revoked later, disrupting your filings at a critical time.

FAQ

Can I get a DSC without a PAN card?

For most business and compliance purposes in India, a PAN card is a mandatory KYC document for Indian applicants. Foreign nationals and NRIs without an Indian PAN typically need to provide notarised and apostilled passport and address proof instead — check with your Certifying Authority for the exact alternate documentation accepted.

How long is a DSC valid?

A DSC is generally issued for a validity period of 1, 2, or 3 years, depending on what you select at the time of application. Once it expires, you cannot use it for signing, and you will need to apply for a fresh certificate or a renewal.

Can one DSC be used for multiple companies?

Yes, an individual's DSC is tied to that person, not to a specific company. So if you are a director in multiple companies, the same DSC can be used to sign filings across all of them, as long as it remains valid.

Do foreign directors and NRIs need a different process for a DSC?

The core process is similar, but foreign nationals and NRIs usually need to submit notarised and apostilled copies of their passport and overseas address proof instead of Indian ID documents like Aadhaar. This can add some extra time, so it is best to start early if you are appointing an overseas director.

What happens if my DSC token is lost or damaged?

If your USB token is lost, damaged, or the password is forgotten, you typically cannot recover the existing certificate and will need to apply for a new DSC altogether. It is a good idea to keep the token secure and store the password safely.

Is video verification compulsory for every DSC application?

Yes, live video verification has become a standard and mandatory part of the KYC process for Class 3 DSC issuance, introduced to prevent identity fraud. Make sure you have good lighting, a stable internet connection, and your original documents on hand during this step.

Can I sign GST and income tax returns without a DSC?

Individuals and certain smaller entities can often use an Aadhaar-based OTP or electronic verification code (EVC) instead of a DSC for some filings. However, companies, LLPs, and taxpayers whose accounts require audit are generally required to use a DSC — verify the current requirement applicable to your entity type.

Which Certifying Authorities are reliable for getting a DSC in India?

Licensed Certifying Authorities such as eMudhra and Capricorn are commonly used and government-approved. It is advisable to apply through a reliable, verified channel rather than an unregistered intermediary, to avoid KYC or compliance issues later.

How Legal Suvidha Makes This Effortless

This is exactly the kind of process where one wrong document, a mismatched detail, or a missed deadline turns into a rejection, a resubmission, or a running penalty. Legal Suvidha handles the whole thing end-to-end so you can focus on your business.

• Fixed, all-inclusive price quoted upfront — professional fee plus government fee, itemised, with no hidden charges appearing later.
• A dedicated Chartered Accountant / Company Secretary who owns your case from the first call to the final certificate.
• Proactive updates and deadline alerts at every stage — we do not disappear after payment.
• Trusted by 10,000+ founders with a 4.9/5 rating and a multi-disciplinary team of CAs, CSs and lawyers.

Talk to a Legal Suvidha expert today for a free consultation and an exact, transparent quote on WhatsApp — and get it done right the first time.