PAdES B-B (ETSI EN 319 142) signatures with X.509 cert (.p12/.pfx: FNMT, idCAT, ACCV) or Autofirma for DNIe. Validated by Adobe Reader and EU eIDAS validators. Cert stays on-device.
Digital signatures are the administrative-grade alternative to a drawn mark — they cryptographically bind your identity to the document via a CMS envelope (PKCS#7, ~10-30 KB overhead) and remain validatable years later. OpenPDF produces PAdES B-B signatures (ETSI EN 319 142) using a software X.509 certificate (.p12 / .pfx from FNMT, idCAT, ACCV, Camerfirma, any eIDAS issuer) or Autofirma for smartcard, DNIe and OS-installed certificates. Validated by Adobe Reader and EU eIDAS validators; everything stays local to your device.
Software X.509 certificates in PKCS#12 format (.p12 / .pfx) — accepted from FNMT, idCAT, ACCV, Camerfirma and any eIDAS-compliant issuer. Smartcards, DNIe and OS-installed certificates are supported through Autofirma.
Yes. OpenPDF produces PAdES B-B signatures (ETSI EN 319 142) that validate in Adobe Reader, valide.redsara.es (@firma) and EU eIDAS validators. For qualified signatures, use a QSCD certificate.
No. Software certificates stay entirely in the browser — the password you enter is used to unwrap the certificate locally and the private key never leaves your device. Autofirma is a local desktop bridge, also offline.
Yes. Once a certificate is unlocked in the browser, sign as many PDFs as you need. Close the tab to discard the unlocked certificate.
OpenPDF is an independent project built around one principle: the PDFs you edit should never leave your device. Every tool — merge, split, sign, organize, annotate, compress, watermark, add page numbers — runs entirely in your browser using WebAssembly and modern JavaScript APIs. There is no upload step, no account, no email harvesting, and no premium tier gating the useful features. The codebase and the third-party scripts loaded for analytics and advertising are visible in the page source — Google AdSense and Google Analytics 4 load only after you accept cookies in the consent banner — so anyone can audit what is running before trusting the tool with sensitive contracts, scanned IDs, or financial documents.
Last updated: