Contact Us: General enquiries or free consultation

We’re really grateful for giving us a chance to connect with you. Please do not hesitate to ask us anything and we will respond to you asap.

[contact-form-7]

The post Inside a Signed PDF: A Dive into PAdES Digital Signatures appeared first on Netrust.

Contact Us: General enquiries or free consultation

We’re really grateful for giving us a chance to connect with you. Please do not hesitate to ask us anything and we will respond to you asap.

[contact-form-7]

The post When AI Becomes the Hacker: What Singapore Businesses Need to Know appeared first on Netrust.

Contact Us: General enquiries or free consultation

We’re really grateful for giving us a chance to connect with you. Please do not hesitate to ask us anything and we will respond to you asap.

[contact-form-7]

The post The Role of Digital Signatures in an AI-Driven World appeared first on Netrust.

Let’s start with a primer video, where we will use letter wax seals to demonstrate what a digital signature is.

Now that you know what encryption is, let’s fill in the remaining information you will need to know to work with it. Don’t worry if the rest of the article seems technical, you just need to know enough to select the most suitable components for your use case.

Use Cases and Algorithms

There are two types of encryption algorithms, symmetric and asymmetric. For ease of understanding, symmetric algorithms use the same key for encryption and decryption, whereas asymmetric algorithms use a key pair instead. A key pair (consisting of a “private key” and “public key”) can be imagined as a digital conjoined twin, tightly bound to each other at birth, with one half used for encryption and the other half for decryption.

They are suitable for different purposes. When considering encryption, it is recommended to start with a symmetric algorithm as the base. They are fast and can handle any amount of data.

This approach is typically enough for most use cases where the intention is to encrypt data to transfer to the archive, or to another internal application. It is expected that the internal application will have the means to use the same key or a securely shared copy of it to decrypt the data.

For transfer to external parties, the same approach could technically work so long as the key can be securely and secretly shared with the external party. It would not do, for example, to send the key via email. Alternatively, asymmetric algorithms would serve well in this scenario.

This approach covers the remaining use cases in which encrypted data needs to be sent out. You will need to get hold of the recipient’s public key or digital certificate if they have it. Yes, it is the same digital certificate used for digital signatures.

Now, which actual algorithm do we go with? Typical industry standard is to use the best open standard algorithm at the time, which is AES for symmetric and RSA/ECC for asymmetric at the point of writing. These algorithms have been thoroughly analysed by the community. Do avoid the trap of thinking of using an obscure or custom algorithm, they add risk without necessarily adding strength to the equation.

Also, ensure that some crypto mode is used together with the symmetric algorithm. The strongest available today unencumbered by patents, is GCM. If some of the legacy components in the ecosystem are unable to handle that, CBC is a good fallback. Do avoid ECB as that is effectively running without a mode.

The reason is best explained by this image from Wikipedia ^[1]. Modes add some jitter into the process so that each time the encryption process is run, different results are produced with the same source data. Yet it is still able to decrypt back to the original source data.

Key Generation and Storage

We have talked about the keys used in symmetric algorithms above. Needless to say, it should be securely generated using a secure random byte generator and access to it should be restricted except for the application doing the cryptographic processes.

The keys need to be rolled over periodically as well. This means old keys are archived (not deleted!) and new keys generated to use on future data encryption. As the encrypted data needs to be accessible in the future, the old keys need to be stored for as long as the data remains in the picture. In some use cases we have seen, this could be 7 years, or as long as 99 years.

For the best security it is recommended to generate and retain the key within a Hardware Security Module (HSM) as it provides both the generation and storage facilities in one hardware package. There are also means to securely backup and restore the keys in the event of disaster recovery or migration to other environments. If your application is on Cloud, there are HSM equivalents or Key Management Services (KMS) which serve a similar role on the major Cloud providers.

For asymmetric algorithms this is not an issue, as public keys or digital certificates are designed to be shared to the party that wishes to encrypt data for you.

Implementation and Applications

Theory is all fine and dandy, but the devil is in the (implementation) details. Cryptography is one of those things where one critical misstep could render the process meaningless. For example, if the encryption key is sent out via an insecure process, it compromises all past and future data encrypted using that particular key.

There are off the shelf applications that can handle the encryption process, but these typically only cover a specific use case or ecosystem. One example is email encryption (S/MIME) through Microsoft Outlook.

For other cases, especially if encryption is required for your application’s data, a custom solution should be expected. This may use an existing cryptographic API product or library, or may be made to measure entirely.

Conclusion

There is a lot more to know under the hood, but contrary to common belief, you do not need to know everything to work with data encryption. What we have laid out above should be sufficient to get you started, though it is strongly recommended to seek a consultation to determine the best solution for your requirements. We are also including answers to some frequently asked questions below that we have encountered before.

Netrust has been a trusted cybersecurity partner and solutions provider since 1997. We have decades of experience in end-to-end cryptographic processes, including encryption and decryption. Every bit of experience we have builds up to the megabytes of confidence you can place in us. Contact us today for a consultation on your encryption needs.

FAQs

• Can I encrypt just a section of the data?

Certainly. Off the shelf applications would not support this, though so the custom implementation would have to be able to cut, encrypt and piece the data blocks back together as required.

• I have already encrypted a file, but then I lost my key/token! What should I do?

The first step is to determine how the key/token was lost. If there are reasonable grounds to believe it has been compromised, you will need to assume that all data encrypted with the lost key is compromised and respond in accordance with your country’s data privacy guidelines, such as the PDPA.

If the key is not compromised, you can look into restoring the key from backup. This should already be defined in the disaster recovery procedures before the system goes live. If the keys are not backed up or cannot be restored, then access to the data is effectively lost.

There is no convenient backdoor to restore access, this is exactly how cryptographic systems are intended to work.

• Can someone else see the data?

No, encrypted data is effectively scrambled. The only way anyone can see the original data is if they know the correct algorithm, modes, and processes that the file is encrypted through, and have the correct key to run said decryption process.

• I am sending the data to an external party; how can they confirm that this data came from me?

Encryption does not carry the sender’s identity. To achieve this, the data can be digitally signed first before it is encrypted and sent. The digital signature (Read up more on our article on Explaining Digital Signatures through real world examples) will carry the sender’s identity.

• Can digital signatures and encryption be used together?

Certainly, they are not mutually exclusive.

• Can someone else tamper with the data?

It is not possible to edit the data without corrupting the original. What that means is once edited, decryption can still be attempted, but the original data cannot be reconstructed. What is likely to emerge would be gibberish data.

Reference table on the differences between Digital Signatures and Encryption.

[1] Image source: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#ECB

Follow us on LinkedIn for the latest happenings/updates.

The post Explaining Encryption through real world examples appeared first on Netrust.

Let’s start with a primer video, where we will use letter wax seals to demonstrate what a digital signature is.

Now that you know what a digital signature is, let’s fill in the remaining information you will need to know to work with it.

Use Cases

In our experience, most use cases revolve around document agreements and thus PDF signing. In fact, digital signatures can be regarded as the next evolutionary step up from electronic signatures, which itself has evolved from handwritten signatures. Given the digital nature, it is more versatile and can protect not only documents, but also other use cases such as signing non-document data or protecting data for archival.

For document agreements, digital signatures signed using digital certificates from Netrust ^[1] enjoy Legal Presumption under the Electronic Transactions Act. Simply speaking, documents with valid Netrust signatures will be accepted as evidence in the court of law without unnecessary scrutiny.

Standards

The process of creating a digital signature follows standards, the prevalent standard now being PAdES for PDF signatures. For non-PDF files, the CAdES standard can be applied. When engaging with the vendors, it would be best to put compliance with standards as one of the requirements. This also helps prevent vendor lock-in.

Applications

As the technology and processes are already mature, digital signatures can be easily created with off the shelf applications. For small amounts or ad hoc signatures, Adobe Reader is readily available. You will however, have to get your own digital certificate that proves your identity. If you have a Singpass account, you can make use of our nSignSG service to utilise Sign with Singpass, which already comes with a digital certificate ^[2] with your identity as well.

For larger amounts of signatures or if you desire a systematic way of signing and verification, there are workflow solutions such as nSignHub or backend applications like nSignCore to fulfil the requirements. For these, it is best to seek a consultation to work out which solution is a better fit for your requirements.

Signature Verification

As a user, when you receive a digitally signed PDF file, it is important to verify the signature. To do so, utilise PDF applications such as Adobe Reader. When verified, said applications will display the results prominently. Do be wary of applications that display PDF content without verification. Typically, if no results are displayed, no verification is done. For more details, you may refer to this article, which includes detailed examples.

Data Archival

Finally, the digitally signed PDF file needs to be stored securely until it is called upon or the agreement lapses. Conceptually, this is identical to storing signed document papers, except that the ‘digital ink’ doesn’t fade. Consult your organisation’s data retention policies for guidelines.

Conclusion

There is a lot more to know under the hood, but contrary to common belief, you do not need to know everything to work with digital signatures. What we have outlined above covers the basics you will need as a user or when interacting with vendors. If an application is required, it is prudent to involve technical experts to ensure the system and processes are watertight.

To find out more about Digital Signatures or to try some hands-on activities, you can reach out to us to organize a session of Digital Signing 101 Workshop. No cost, no obligations! Just knowledge sharing.

We are also including the answers to some frequently asked questions below that we have encountered before. Check them out.

FAQs

• Can I sign just a section of the file?

This is not possible for PDF signing; digital signatures are applied to the whole document. You can simulate the intent by having certain signers sign at the end of sections instead of at the end of the document.

• I need to make changes after the first signature. How can I do it?

This requires some preplanning. This scenario is typically only required when the next signer needs to put the current date on the form, as compared to the concept of really ‘editing’ the document, which should be finalised before any party signs the document.

First, you must ensure that the fields are not locked after the first signature. This typically means certain settings need to be done depending on which application is used to create the digital signature. Then, changes can still be made on the fields as required.

During this stage, any changes made are reflected and past signed versions can be previewed through Adobe Reader. Here are some examples of how the process will look.

With first signature only: 

With changes applied:

With second signature applied: 

• How can I protect the changes that I have made?

Apply another digital signature on it. Typically, a digital signature should be the last action taken on the file, and it should also lock all fields to prevent further changes afterwards.

• My company’s processes require the signer to sign on every page as an acknowledgement. Can this be done?

Technically, yes. But it is not recommended as every digital signature covers the entire document and comes with its own size overhead. This will bloat up the file size unnecessarily.

It is typically recommended to advise the signer to review the document in its entirety before signing. Alternatively, an electronic signature can be placed on each page to represent the same acknowledgement.

• I have already signed a file, but then I lost my key/token! What should I do?

Well, the good news is the signing process typically embeds your digital certificate (Without the key) into the digital signature, thus ensuring that anyone can verify the signature. So, this does not affect any of the files you have already signed.

However, the bad news is, you will not be able to sign any more files since the key/token is lost. You should also immediately contact the certificate authority to report that this is lost so that they can revoke the certificate to prevent misuse and reissue you a new digital certificate.

• How do I verify a digital signature?

PDF applications like Adobe Reader can be used, it will automatically verify the signature(s) when opening the file. For applications, they can integrate with products which provide an API to verify digital signatures such as nSignCore.

• The digital signature is valid. But how do I know I can trust the person/organisation who signed the file?

First, you must be aware of where the document originates from. If the document came from an organisation, the identity in the signature should be from the organisation or a member of the organisation.

The certificate authority is required to verify the applicant’s identity, including whether they are an authorised staff member from the organisation, before issuing the digital certificate which is signed with a digital signature.

If in doubt, contact the person or organisation to clarify.

• Can someone else see the document content?

Yes, digital signatures does not hide the document content. You can explore encryption (Read up more on our article on Explaining Encryption through real world examples) or utilise password protection measures to fulfil that requirement. 

• Can digital signatures and encryption be used together?

Certainly, they are not mutually exclusive.

• Can someone else tamper with the document content?

It is not possible to edit the document data without breaking the digital signature.

• Can someone else reproduce my digital signature after tampering with the document content?

It is not possible to do that unless they can access the key that comes with your digital certificate. Hence, it is important keep your key/token securely.

• Can I know what has been changed, or revert the document back to the original state?

Digital signatures are designed to flag out tampering, but it is not possible to highlight or revert the changes. Therefore, it is still important to retain a copy of the digitally signed document so that a pristine copy is available when required.

Reference table on the differences between Digital Signatures and Encryption. 

[1] Other than Netrust, signatures signed using Sign with Singpass also enjoy legal presumption. Information is accurate at time of publish.

[2] Certificate is issued from Govtech Certificate Authority upon first attempt to sign using Sign with Singpass.

Follow us on LinkedIn for the latest happenings/updates.

The post Explaining Digital Signatures Through Real World Objects appeared first on Netrust.

Digital signatures are a fundamental part of modern transactions in today’s fast-paced world, where efficiency and security are everything. They streamline company processes, from signing contracts to approving financial documents, making them faster, more secure, and more transparent. So, what makes digital signatures so important, and how do they benefit the business? Let’s break it down.

What is a Digital Signature?
Think about the common situation of affixing your signature to a physical contract. Digital signatures are the same; they show your consent and everything is done online. A digital signature does not use an actual handwritten signature but uses a complex encryption technique that can verify the identity of the signer and the authenticity and integrity of the document.

– Enhanced Security
Documents that are signed by digital signatures are easily detected if there is any alteration or amendment after the signing. This allows businesses to verify that their document or agreements received from others are legitimate and haven’t been altered

– Legal Validity
Today many countries are starting to recognise digital signatures as they carry a greater weight than traditional signatures. Digital signatures provide a layer of security and prove the authenticity and integrity of a transaction allowing businesses to have confidence in what they are dealing with for the documents that with digital signatures in place.

– Faster processes
Using digital signatures to sign a document, a signer can just simply sign the document with a few clicks. This improves the speed of processes like vendor agreement, onboarding employees and contract signing which allow your business to close deals faster and with less hassle.

– Cost Savings
Since the digital signature allows you to sign a document digitally, this means there is no need to spend on paper, printing and postage. The company can save on office supplies and reduce the need for physical storage, which also cuts down on the expenses for retrieving and archiving documents.

– Simplifies Remote Work and Global Transactions
The digital signature allows documents to be signed from everywhere virtually. Whether your customer or client is across town or halfway around the world. You can also finalize the deals without needing to be in the same room or even the same time zone.

Some businesses increasingly using digital signatures to streamline workflows, improve security and improve customer experience as below:

– Sales Contacts
In the world of sales, time is money. Delaying in contact signing means there is a chance to miss the opportunities or slow revenue. Sales teams can send contacts and proposals to clients. Clients can review the document, sign and return the document in a few minutes which helps sales teams secure the commitment and move on to the next opportunity

– Healthcare Forms
Hospitals, clinics, and other healthcare facilities are bound by regulations that require patient consent and documentation for treatments, data privacy agreements, and procedures. Patients can digitally sign the consent forms securely before arriving at the clinic which reduces waiting times and also allows staff to focus more on patient care. Digital signatures play a crucial role in ensuring the authenticity and integrity of signed consent forms. By supporting compliance with industry regulations, digital signatures contribute to an efficient documentation process.

– Employee Onboarding
HR departments spend most of the time onboarding new hires, and managing paperwork like offer letters, NDAs and various policy agreements. Digital signatures allow new employee to sign all required documents electronically even before their first day on the job. This helps speed up the onboarding process and HR can focus more on introducing new employees to the team and helping them transition smoothly rather than getting bogged down with paper-based tasks.

Digital signatures are transforming how businesses operate by making processes faster, more secure and cost-effective. It allows companies to streamline processes, enhance document security and ensure legal validity. With digital signatures in place, businesses can now close deals quickly, work efficiently across borders and reduce their environmental footprint. As more industries adopt digital solutions, digital signatures are becoming an essential tool for success in today’s world.

To find out more, contact us at https://www.netrust.net/contact-us/ now.

Follow us on LinkedIn for the latest happenings/updates.

The post Understanding the Importance of Digital Signatures in Modern Business Transactions appeared first on Netrust.

nSignBasic Cloud Signing is a service where Netrust stores the signer’s private key and signs requested documents on the signer’s behalf when authorized. This approach takes the convenience factor up a notch while retaining the security benefits of a USB cryptographic token. With nSignBasic Cloud Signing, anyone can sign any document anywhere anytime.

In today’s digital signature landscape, it is normal for the signer to carry a USB cryptographic token containing the private keys before the signer can digitally sign on documents. In terms of security, this already takes the cake. That’s already quite nice, but what if we could make it even sweeter?

Are there other alternatives to tokens today? Sign with Singpass is one such avenue (You can experience Sign with Singpass anytime using our free nSignSG service). It is secure, convenient, and backed by the Singapore Government. However, this service is only available to Singpass Mobile users and allows signing in a personal capacity^[1]. That’s just the way the cookie crumbles.

To complete the circle, enter nSignBasic Cloud Signing.

nSignBasic Cloud Signing is a service where Netrust stores the signer’s private keys on behalf of the signer. The keys are stored securely in Hardware Security Modules (HSMs) and routine maintenance and technology refresh is handled by Netrust such that the signer has a seamless user experience while maintaining a high level of security and convenience.

To utilize the service, simply register for a certificate with Netrust and request for it to be provisioned into nSignBasic Cloud Signing. Next, set up strong authentication on the account. Finally use a compatible signing application such as nSignHub, a workflow solution, to call upon the private keys for signing. ^[2]

nSignBasic Cloud Signing is designed so that the signer’s keys will not be activated until the signer provides strong authentication, and even then, only the documents designated by the signer will be signed. This system can be utilized anywhere, anytime in the world without having to carry a cryptographic token to boot.

That’s not to say that the token is going the way of the dodo. It still serves some use cases well, for example when the signer does not have any network connectivity or is somehow restricted by the environment. The token is also useful when the signer wants to keep his/her private keys personally.

USB cryptographic tokens and HSMs provide top-notch security for the signer’s private keys. Throw in a pinch of convenience with nSignBasic Cloud Signing, and that’s just the icing on top of the cake.

nSignBasic Cloud Signing is a new product offering that will be launched soon. Stay tuned for updates.

Get your digital identity with us now! Check out nSignBasic for more information. You can also buy it online immediately. For other enquiries such as a large number of certificates or getting certificates issued programmatically, feel free to contact our sales team at https://www.netrust.net/contact-us/.

Do you just need to get a document signed with Singpass? You can use nSignSG, a free service from #NetrustGivesBack initiative to get it done fuss free.

Follow us on LinkedIn for the latest happenings/updates.

[1] Information is accurate at the time of publication.

[2] Further usage details will be provided after the product is launched.

The post nSignBasic Cloud Signing – Icing on the cake appeared first on Netrust.

In the heart of Southeast Asia’s technological hub, Singapore stands as a beacon of innovation, and as transactions move towards the digital realm, understanding the nuances between digital and electronic signatures becomes imperative. In the rapidly evolving landscape of digital transactions, the distinctions between electronic signatures, digital signatures, and the groundbreaking ‘Sign with Singpass’ have become pivotal in the Singaporean business realm.

Understanding Electronic Signatures:

Electronic signatures, a cornerstone of modern business, have simplified document authentication. In Singapore, their prevalence has surged, offering a streamlined alternative to traditional ink signatures. Electronic signatures can be as simple as typed text, a scribble, or an uploaded image. When comparing their assurance level to that of a digital signature or ‘Sign with Singpass,’ it is the lowest. Quick and legally binding, electronic signatures have become a go-to solution for a myriad of transactions.

Decoding Digital Signatures:

While electronic signatures have gained widespread acceptance, digital signatures elevate the security quotient. Unveiling a more advanced layer of authentication, digital signatures employ cryptographic algorithms, ensuring the integrity and authenticity of the signed document. As businesses in Singapore navigate the digital landscape, the adoption of digital signatures has emerged as a hallmark of commitment to data integrity.

Revolutionizing with ‘Sign with Singpass’:

Enter the game-changer – ‘Sign with Singpass.’ As Singapore pioneers the integration of national identity authentication into the signing process, this innovation not only enhances security but also aligns with the Smart Nation initiative. Leveraging the Singpass credentials, individuals can now sign documents with unprecedented ease, combining the convenience of electronic signatures with the security of digital authentication.

Navigating the Differences:

While all three types of signatures serve the purpose of ensuring document authenticity, the nuances lie in their methodologies. Electronic signatures focus on the act of intent, digital signatures add cryptographic security, and ‘Sign with Singpass’ merges both, utilizing national identity for a robust, user-friendly experience.

nSign Digital Signing Suite: nSignSG

nSignSG is one of the signing solutions from nSign Digital Signing Suite. It is a live signing platform which is available free for the members of the public to perform digital signing with Sign with Singpass.

4 simple steps to start signing using the Singpass Mobile App on nSignSG.

• Acknowledge
• Upload the Document
• Sign using Singpass Mobile App
• Complete & Download File

Head over to nSignSG to try out the Sign with Singpass service with your documents and your Singpass Mobile App.

For enquires or unique signing requirements e.g. Sign with Singpass integration and/or the nSign Digital Signing Suite, contact Netrust at https://www.netrust.net/contact-us/.

Follow us on LinkedIn for the latest happenings/updates.

The post Digital Signature & Electronic Signature: Singapore Edition appeared first on Netrust.

Did you know that Digital Signatures was first implemented in 1988? It implemented the RSA cryptographic algorithm, which is still being developed and used today. Even so, not too long ago, the corporate world was still using rubber stamps and wet ink signatures to legalise documents. They would even share the authorisation process by sharing the physical stamp with their employees, or authorise the use of the company logo or seal.

With the utilization of rubber stamps declining, companies began using electronic signatures. However this still only utilised an image of an authorised person’s signature. It is commonly presumed that the person who signed has personally verified with the use of the signature image.  So, how did they deal with authenticating signatures in the days of yore?

Let us revisit the history of the technology chronologically.

• 1976: Whitfield Diffie and Martin Hellman first proposed the idea of a digital signature scheme, but no prototype was developed yet
• 1977: Ronald Rivest, Adi Shamir and Len Adleman devised the RSA algorithm for digital certificates
• 1988: Lotus Notes 1.0 was launched and used the RSA algorithm
• 1998: The Electronic Signatures Act in Singapore  was established to provide a legal foundation for electronic transactions
• 1999: The ability to embed digital signatures into documents is added to PDF format
• 2000: The Electronic Signatures in Global and National Commerce Act (ESIGN) was enacted in the United States, establishing the legal framework for electronic signatures and records, enabling recognition and legitimacy in both domestic and international commerce.
• 2008: The PDF file format becomes an open standard to the International Organization for Standardization (ISO) as ISO 32000. Includes digital signatures as an integral part of the format
• 2010 onwards: Digital signatures continued to play a significant role in secure online communication, document authentication, and electronic transactions. The technology has evolved further to improve accessibility and ease of use. Some of the improvements are:
  • Digital signatures were widely adopted in various sectors, including government, finance, healthcare, and legal. They provided a means of ensuring the authenticity and integrity of digital documents and messages.
  • Digital signature algorithms evolved to include more secure and efficient cryptographic methods. RSA, DSA, and ECDSA (Elliptic Curve Digital Signature Algorithm) were commonly used algorithms
  • Mobile and Cloud Integration: With the proliferation of smartphones and cloud services, digital signatures have become more accessible. People could sign documents and contracts on mobile devices and store digital signatures in the cloud for easy retrieval.
  • User-Friendly Interfaces: User interfaces for digital signature solutions became more intuitive, allowing individuals and organizations to adopt them without requiring advanced technical knowledge.

Using a digital signature offers significant advantages and is widely adopted. Firstly, the identity of the signer undergoes verification, establishing a trust foundation in digital interactions. This process is strengthened by the sole possession of the private key linked to the digital certificate in use, restricting access exclusively to the authorized signer. Nonrepudiation, a crucial principle, ensures that neither party can deny involvement in sending or receiving a message, thanks to the protective measures of encryption and digital signatures. Additionally, the integrity of transmitted information is preserved, as any attempt at tampering renders the digital signature invalid, thereby safeguarding the authenticity of the data.

Today, it is evident that the COVID-19 pandemic has made a profound impact on the way we conduct business in the office, fundamentally transforming and even accelerating the process of digitization. As the pandemic forced employees to adapt to remote work out of necessity, one of the key aspects that quickly gained significance in this new landscape was the use of digital signatures in various work processes. This shift was not merely a matter of convenience but a vital adaptation to ensure the continuity of essential business operations. In this context, those who clung to the traditional practice of using images of wet ink signatures encountered numerous legality issues.

Digital signatures, unlike their paper counterparts, offer several advantages in a remote work setting. They are secure, tamper-evident, and easily verifiable. They also provide a digital trail that records who signed a document and when enhancing transparency and audibility. Moreover, digital signatures are typically legally recognized in many jurisdictions, enabling organizations to maintain compliance and meet legal requirements even in a remote work environment. Although many organizations recognize the necessity to accelerate the adoption of digital signatures for document signing, implementing this change may prove challenging due to the persistence of traditional signing methods. Some remain hesitant to rapidly overhaul established practices.

Over the last few years, Netrust has successfully addressed the increasing need for enhanced digital signing solutions in response to the surge in remote work demands. To assist users in this transition, we’ve provided easily accessible video tutorials available on our website, check out the tutorial here.  Additionally, we’ve organized comprehensive online seminars via Zoom, designed to educate entire organizations on the seamless integration of digital signing methods into their day-to-day business operations.

To find out more or to embark on digital signing for your organization, reach out to us today >>> https://www.netrust.net/contact-us/

Follow us on LinkedIn for the latest happenings/updates.

The post Authenticating Signatures in Days of Yore appeared first on Netrust.

In this blog, I will share three expert tips and tricks that will enhance your experience and efficiency while using nSignHub. From time-saving shortcuts to advanced features that maximize security, we’ve got you covered. Whether you’re a beginner just getting started with the platform or an experienced user looking to unlock its full potential, you can navigate nSignHub confidently and achieve optimal results.

Single Sign-On (SSO)

Did you know that you can also leverage popular single sign-on (SSO) options such as Google and Microsoft to quickly log in to nSignHub? This feature eliminates the need to remember and manage multiple login credentials, streamlining your access to the platform.

All you need is a Google or Microsoft account with the same email address registered on nSignHub.

To access nSignHub using your Google or Microsoft account, simply click on the “More Login Options” button and choose either “Google” or “Office 365.” A pop-up will appear, allowing you to select the desired account if you have multiple accounts associated. After selecting the account, you will be seamlessly redirected to the main page of nSignHub.

Enhance Document Security with Email OTP Authentication for Access and Signing

Did you know that the document owner can set the necessary security options for the signer during the preparation of the workflow? The document owner can choose to authenticate the signer using email OTP to grant access to the document. This provides an added level of security to ensure that the document will be accessible only upon providing the correct OTP.

The document owner can also choose to authenticate the signer using email OTP when the signer attempts to sign the document.

Note: If you are unable to find this option, you may contact our customer service team to enable this option.

Delegate Settings

Imagine enjoying a relaxing holiday when, unexpectedly, you find yourself in an urgent situation that requires you to digitally sign a document. The catch is that you don’t have any means of accessing the internet, leaving you without a way to fulfill this pressing task.

Did you know that within your enterprise, you have the option to delegate the signing of documents to a trusted individual for a specific duration? Additionally, you can assign a trusted person to review documents before they reach you, granting them the authority to reject any documents that should not be forwarded for your signature.

To add your delegate:

1. Click your profile drop down menu (available at the top right corner).
2. Click the “My Settings” option.
3. Click the “Delegated Signing” option from the left menu.

If you want to delegate the signing of documents to a trusted individual:

1. Tick the “Allow someone else to sign on your behalf” check box to enable it.
2. Click “+” from the grid header. The “Add Delegate” dialog will appear.
3. Specify the contact to whom you want to delegate your signing authority. The contact can be specified by using their Name or Email ID.
4. Specify the exclusive period by using the “From” and “To” fields during which this configuration is effective.
5. The Delegated Signing will be ineffective beyond the specified period.
6. Click the “OK” button.
7. The delegate will be added to delegated settings list.
8. Click on the “Save” button from the “Delegate Settings” screen.

.

If you want to delegate reviewing of documents to a trusted individual:

1. Tick the “Allow users to work as gatekeepers and review documents on your behalf” check box to enable it.
2. Specify the contact to whom you want to assign as your gatekeeper. The contact can be specified by using their Name or Email ID.
3. Click the “Save” button from the “Delegate Settings” screen.

Hopefully, these little tips and tricks will allow you to improve your digital signing experience in nSignHub!

nSignHub now supports Sign with Singpass, and it is currently available in every price plan at no extra charge! You can reach out to us at https://www.netrust.net/contact-us/ to find out more about Sign with Singpass activation.

Follow us on LinkedIn for the latest happenings/updates.

The post Tips and Tricks on using nSignHub appeared first on Netrust.