A DSC (digital signature certificate) is the electronic equivalent of a physical signature, issued by a licensed certifying authority and stored on a USB token. Class 3 is the standard now used for all regulatory filings in India — MCA forms, GST registration and returns, income-tax filings, e-tenders and EPFO. Directors and authorised signatories cannot file without one.
Getting one is quick: a certifying authority (or its registration agent) verifies your PAN, Aadhaar-based or video KYC, and issues the certificate onto a hardware token, usually within a day. Validity is typically one to three years, after which it must be renewed — an expired DSC is the single most common reason an ROC or GST filing fails at the last minute.
For a company, at least one director needs a DSC from day one, because SPICe+ incorporation itself is signed digitally. After that it is used to sign AOC-4, MGT-7, DIR-3 KYC, and — once registered on the income-tax portal — the company's ITR, which must be DSC-verified for companies. Register the DSC against your PAN on each portal before filing season, not during it.
Common mistakes: lending the token to a consultant without any record of what gets signed (a DSC is legally your signature — treat it like a blank cheque book), and buying a fresh DSC after every expiry without deregistering the old one on the MCA and GST portals, which causes signature-mismatch errors.
Act on it
Reviewed to the law in force in FY 2026-27. General information, not advice — confirm the position for your facts before acting.