Security
How to verify a government certificate or university degree PDF
Verify two things. First the file: if it carries a digital signature, check it is intact, that nothing was added after signing, and that the certificate belongs to the issuing institution. Second the record: use the issuer's own verification service (a QR code, reference number or online register) reached through an address you found yourself. The file check proves the PDF is unaltered; only the issuer can confirm the record still stands.
More and more official documents are born digital: degree certificates, transcripts, birth and marriage certificates, police clearances, tax certificates, professional licences, company registrations. They arrive as PDFs, and the people who receive them (employers, universities, embassies, landlords) need to know they are real.
There are two layers to verifying any of them, and you usually need both.
The short answer
- The file layer: is this PDF exactly what the issuer produced? A digital signature answers this with certainty, when there is one.
- The record layer: does the issuer still stand behind it? Only the issuer can say, through a verification code, QR code or online register.
A perfectly signed PDF of a degree that was later revoked passes the first test and fails the second. A genuine printout with no digital signature fails the first and passes the second. That is why both matter.
Layer 1: check the file
Upload the PDF, exactly as it was downloaded or received, to Verify PDF Signature.
If there is a digital signature
- The verdict should read Unchanged since [institution] signed it. If the file was changed after signing, read the list. A changed page or an added text box on a certificate is a serious red flag.
- Certificate details should show a certificate issued to the institution (or its authorised signing service) and issued by an authority that makes sense: the country's official certification authority for a government body, a recognised commercial authority for many universities.
- Trust: Not trusted is not a rejection on its own. Several national government root authorities are not on general-purpose trust lists. Look at who the issuer is.
- Revocation: Revoked is a red flag.
Many institutions use certification signatures, which Adobe displays with a blue ribbon. They are the institution saying "this is the document as we released it, and nothing may be changed".
If there is no digital signature
The checker will say so, and point out any signature images, stamps or unsigned signature fields. That does not make the document fake. Many institutions issue PDFs with a printed signature and a verification code instead. Go straight to Layer 2.
Warning signs in the file itself
- A digital signature was expected (the issuer's other documents have one) and this copy has none. It may have been re-created or edited.
- The PDF was clearly scanned from a printout of what should be a digital original.
- Mismatched fonts, misaligned lines, or a signature or seal that looks pasted on.
Layer 2: check the record with the issuer
Most issuers now offer at least one of:
- A QR code that opens the issuer's verification page showing the same details.
- A verification or reference number that you type into the issuer's website.
- An online register: of graduates, licensed professionals or registered companies.
- A direct verification service that employers can request, sometimes through a third-party service the institution has appointed.
The golden rule: reach the verification service through an address you found (the institution's official website, found by searching yourself) not a link or phone number printed on the document. Forgers print convincing QR codes that lead to convincing fake verification pages. If you scan a QR code, check the web address carefully before trusting what it shows.
Examples of how this works in practice
These change over time, so treat them as a guide to what to look for rather than an exhaustive list:
- India: many documents are issued into DigiLocker or carry a digital signature from a licensed certifying authority; the e-Aadhaar PDF is digitally signed by the issuing authority. See How to verify a DSC-signed PDF in India.
- Brazil: documents signed with ICP-Brasil certificates or through the gov.br platform can be checked on the national institute's official validator; many also carry an authentication code. See How to verify an ICP-Brasil signature.
- Spain: documents from public administrations commonly carry a CSV (Código Seguro de Verificación), a code you enter on the issuing body's electronic office to retrieve the original.
- France: many official documents carry a 2D-Doc barcode that encodes and signs the key details, readable with a compatible app.
- Turkey: documents obtained through e-Devlet carry a barcode that can be checked in the e-Devlet barcoded-document verification service.
- United States: federal publications from the Government Publishing Office carry a digital signature and the "Authenticated U.S. Government Information" seal; degrees are usually verified through the institution or its appointed verification service.
- Philippines: documents signed with the national PKI chain to the Philippine root authority, which Adobe does not include by default. See How to verify a PNPKI-signed PDF.
Special case: university degrees and transcripts
Universities increasingly issue digitally signed PDF diplomas and transcripts, sometimes through specialist credential platforms. Typical features:
- A certification signature from the university or its platform, so any edit is detected.
- A unique credential ID or link to a verification page.
- Sometimes a "blockchain-anchored" credential. This is still, underneath, a claim that the issuer published a fingerprint of the document; verify it through the issuer or the platform it names.
For admission and hiring decisions, most institutions also accept (or insist on) verification requests sent directly to the registrar, or transcripts sent directly from one institution to another. Those remain the gold standard.
What to keep on file
- The original PDF, exactly as received.
- A verification report: Download report (PDF) in Verify PDF Signature records each signature's result, any changes, the certificate details and the file's SHA-256 fingerprint.
- A screenshot or printout of the issuer's verification result, with the date.
Common questions
How can I verify a degree certificate PDF?
Check the PDF's digital signature if it has one (that it is intact and issued to the university) and then confirm with the university through its official verification service or registrar, reached through its real website rather than a link on the document.
The certificate PDF has no digital signature. Is it fake?
Not necessarily. Many issuers use a printed signature with a verification code or QR code instead. Use that code on the issuer's official site to confirm the record.
Can a QR code on a certificate be faked?
Yes. A forger can print a QR code that opens a fake verification page. Always check the web address it opens, or go to the issuer's site yourself and enter the reference number.
The government signature shows “Not trusted”. Is the document fake?
Not necessarily. Some national government root authorities are not on general-purpose trust lists. Check who issued the certificate and use the country's official validator or the issuing office's verification service.
What should I keep as evidence of verification?
The original file, a verification report showing the signature checks and the file's SHA-256 fingerprint, and a dated record of the issuer's own confirmation.