Security and privacy · Independent · 23 Oct 2026

intoolswetrust/jsignpdf

Cross-platform PDF digital signing tool. JavaFX desktop UI with drag-to-place visible signatures, PKCS#11/PKCS#12 keystores, RFC 3161 timestamping, OCSP/CRL long-term validation, and a scriptable CLI.

← Security and privacy
JSignPdf: PDF signing tool. Adds cryptographic signatures and timestamps to PDFs.

In simple English

This program signs PDF files to prove who sent them and stop anyone from changing them. You can click and drag to place your signature on a specific page. It works with software files or physical smartcards and security tokens. You can run it on your computer using a window or through command-line scripts. It costs nothing to download and use.

What it is

A cross-platform desktop application and command-line tool written in Java that adds digital signatures, timestamps, and validation data to PDF documents. It supports both software keystores and hardware security modules.

What it is good for

Solo builders who need to legally sign invoices, contracts, or official documents in bulk or via an automated script without paying for expensive cloud signing services.

Stars483
LicenceCustom
LatestJSignPdf_3_2_1 (2026-09-28)checked 23 Oct 2026
Last code change2026-10-20
Written inJava
Setup effort
3 / 5
Payoff
4 / 5
Good
  • Runs on Windows, macOS, and Linux with a graphical interface or command-line mode.
  • Supports hardware smartcards and USB tokens for high-security signing.
  • Adds timestamps and long-term validation data so signatures stay valid for years.
Watch for
  • Requires Java 21 or newer installed on your computer to run the cross-platform versions.
  • Setting up physical hardware tokens or software keystores requires some technical knowledge.
  • The graphical interface looks functional rather than modern.
Replaces

Adobe Acrobat paid signing features or commercial PDF signing software

Works well with

LibreOffice for generating PDF invoices before signing

Also reviewed on Repo Radar
  • smallstep/certificates9.0k stars

    Issues and renews the TLS and SSH certificates that machines on a private network need, speaking the same protocol as the public free services.

  • michelp/pgsodium614 stars

    A PostgreSQL extension that brings libsodium's encryption functions into SQL, with a root key the database cannot read back.

  • pgaudit/pgaudit1.7k stars

    A PostgreSQL extension that records what was done to the database, in the database's own log.

Install
brew tap intoolswetrust/tap
brew trust --tap intoolswetrust/tap
brew install jsignpdf

Independent: reviewed for Repo Radar outside the daily editions. Every independent repository

On Stack Radar: Business Operations & Legal › Contracts & E-Signature › E-Signatures.

Get the next edition in your inbox

A dozen repositories, opened and checked. The licence read, the last release dated, and the ones that did not make it named with the reason. It is the half most lists leave out.

No tracking pixels. One click to leave. The archive stays free either way.

We use your address to send the edition and nothing else. Confirm by email, leave in one click. How we handle it.