Qualified electronic signature (QES) explained

A qualified electronic signature, or QES, is an electronic signature that EU law treats exactly like a handwritten one. Article 25 of the eIDAS Regulation says it has the equivalent legal effect of a handwritten signature, and that a QES based on a qualified certificate from one Member State must be recognised in all the others. No other kind of electronic signature gets that automatic status.

The three levels of electronic signature

eIDAS (Regulation (EU) No 910/2014, amended by Regulation (EU) 2024/1183) distinguishes three levels.

Level	What it is	Typical use	Legal weight
Simple (SES)	Any electronic data attached to or logically associated with a document, such as a typed name or a ticked box	Everyday approvals, many online forms	Cannot be refused as evidence only because it is electronic, but you must prove who signed
Advanced (AdES)	Uniquely linked to the signer, able to identify them, created under their sole control and able to detect later changes	Business contracts, internal workflows	Admissible as evidence, strength depends on the setup
Qualified (QES)	An advanced signature created with a qualified signature creation device and based on a qualified certificate	Contracts that need written form, official filings	Equivalent to a handwritten signature, recognised EU-wide

The jump from advanced to qualified is mainly about trust infrastructure. A QES involves a qualified trust service provider (QTSP) that is audited, supervised by a national authority and listed on an EU trusted list. That provider issues your qualified certificate, and the key that signs is protected in certified hardware or a certified remote environment.

How you get a QES

1. Choose a qualified trust service provider. Check that it appears on the national trusted list of its Member State. The EU trusted lists are public.
2. Prove your identity. The provider must verify who you are, under Article 24 of eIDAS, by a method with equivalent assurance to a physical presence. Common routes are an in-person check, a national eID card read by your phone, a notified eID scheme, or a supervised remote identification process.
3. Receive a qualified certificate. It links your name to a public key. Some providers issue short-lived certificates for a single signing session, others issue longer-lived ones.
4. Sign. You open the document, approve the signature and authenticate, usually with a PIN plus a second factor.

Remote signing instead of smartcards

Until about 2016 a QES typically meant a smartcard and a reader. Since eIDAS, remote qualified signing has become common: the QTSP keeps your signing key inside a qualified signature creation device it operates, and you activate it with strong authentication that you alone control. This is the model behind most mobile QES today, including national solutions built on national eID cards.

Some countries have woven QES into their national eID. Austria’s ID Austria, which replaced the Handy-Signatur in December 2023, includes a free QES after registration. Germany’s online ID function of the national identity card lets providers identify you for a QES in minutes. Estonia has supported qualified signatures with its ID card for years. The experience differs from country to country, so look at your national page in our country section for what is available to you.

What the EUDI Wallet changes

The European Digital Identity Wallet, covered in our guide to the EUDI Wallet, is meant to bring QES to the phone in a standard way. Under the revised eIDAS Regulation (see eIDAS 2.0 explained), wallets must allow users to sign by means of a QES, and Member States must provide this free of charge for non-professional purposes. Two caveats are worth knowing as of October 2026:

• Rollout is uneven. Member States must offer a wallet by the end of 2026, and national launches are at different stages, so QES inside a wallet is not available everywhere yet.
• “Non-professional” is not defined in detail. The Regulation lets Member States limit the free service to non-professional use. Freelancers signing business contracts may still need a paid QTSP.

Wallets also introduce a clean separation: the wallet holds your identity attestations, and a qualified provider can issue the signing certificate on the basis of them. How tightly these fit together is still being worked out in technical specifications.

When you actually need a QES

Most online approvals do not need one. You are more likely to need a QES when:

• a law requires written form and permits an electronic equivalent,
• a public authority or court portal demands it,
• a counterparty wants maximum evidential strength, for example for a high-value contract signed across borders,
• a bank or insurer asks for it during onboarding (see digital identity for banking).

For simple things like a delivery note or a newsletter consent, a simple or advanced signature is enough, and demanding a QES just adds friction.

Limits to keep in mind

• National formalities remain. Some documents still require paper, a notary or an authentic instrument. A QES does not override that.
• Validation matters. A signature is only as useful as the recipient’s ability to check it. Use validation tools that read EU trusted lists, and keep the signed file in its original format.
• Certificates expire. Long-term archiving needs timestamps or preservation services so the signature stays verifiable after the certificate has lapsed.
• Identity level matters. The strength of your identification at issuance is what makes the signature trustworthy. See levels of assurance for how eID assurance is graded.

What to do next

If you are not sure whether you need one, ask the requesting party which signature level they require, then compare providers on identification options, price and platform support. If you live in a country with a national eID, check first whether it already includes a QES. If you plan to wait for the wallet, keep an eye on your national launch date and the exact conditions for free signing.