Download
One app, your own certificate
TapSign is on the App Store for iPhone, iPad and Mac, on the Microsoft Store for Windows, as a package for Linux, and on Google Play for Android. Install it and you can sign real documents today.
iPhone
iOS 17 or later
USB-C token, or USB-A with a USB-C adapter
iPad
iPadOS 17 or later
USB-C token, or USB-A with a USB-C adapter
Mac
macOS 14 or later
Token or card reader over USB
Microsoft Store
Windows
Windows 10 or later
Same signing on the PC. Get it from the Microsoft Store, or download the zip. x64 for Intel and AMD. ARM64 for Snapdragon.
The Store picks x64 or ARM64 for this PC and keeps TapSign current. No zip archive is needed, and the app does not contact this site.
Or download the zip
Unzip and run TapSign.exe. The first launch adds the Start menu shortcut and the Explorer sign command. Pin it to the taskbar yourself if you want it there. These links always serve the latest build.
This check belongs only to the zip you download here. When that build opens, it asks for a newer one with a GET to the URL below. The request names the platform, the architecture and the version you already have. It does not send documents, certificates or a PIN. The Microsoft Store build does not call this address. The Store keeps that copy current.
Linux
Ubuntu, Debian, Fedora, RHEL, Arch and Flatpak
Same signing on the PC. Flatpak from our repository, .deb, .rpm or Arch package. x64 and ARM64. PKCS#11 through the middleware you already have.
Flatpak
Add the TapSign repository, then install the app.
flatpak remote-add --if-not-exists --no-gpg-verify tapsign https://tapsign.eu/flatpak/tapsign.flatpakrepo flatpak install tapsign eu.tapsign.TapSign
The first command adds the repository. The second installs TapSign. Later updates are flatpak update.
Download the repository fileUbuntu / Debian
Fedora / RHEL
The .deb, .rpm and Arch package are the site packages. These links always serve the latest build for that format. On Arch, install with pacman -U.
This check belongs only to the .deb, .rpm or Arch package you download here. That package asks for a newer build when it opens, the same way the Windows zip does. A Flatpak from the TapSign repository does not call the site. flatpak update keeps that copy current.
Hardware it works with
TapSign talks to the chip itself, so what matters is the hardware standard rather than whose logo is on it. Qualified certificates in Romania are issued by certSIGN, DigiSign, Trans Sped, CertDigital and AlfaSign, and all of them ship one of the devices below.
- SafeNet eToken 5110 and 5110 CC
- The USB stick most providers ship, sold under their own labels. USB-C plugs straight into iPhone, iPad and Mac. USB-A does the same, with a USB-C adapter.
- Thales IDPrime cards, including MD 940
- Same chip family as the sticks. It is a card rather than a stick, so it needs a reader.
- Any CCID card reader
- Identiv, ACS, HID Omnikey, Thales IDBridge and the rest. macOS has the driver built in, so nothing needs installing.
- Romanian electronic ID card
- Over NFC on iPhone, or through a card reader on a Mac. Carries an advanced signature rather than a qualified one.
- Older SafeNet Java tokens
- The generation before the 5110 runs a different, undocumented applet. It works on a Mac with the vendor software installed, but not on iPhone.
Signing is free
Not free for a while, not free for the first ten documents. Signing with your own certificate costs nothing, and that is the part we do not intend to charge for.
- No charge per signature, and no limit on how many you make
- No subscription needed to sign, on any platform you install it
- No account required, and no card details asked for
One day there will be a small optional purchase for things that cost us something to run, such as encrypted document storage. Putting your own signature on your own document will not be one of them.