Quickstart

Sign your first document hash using SecureSign Mobile App or Desktop Software.

Step 1 — Get API Key

Log in to the SecureSign Admin Console and create an API key. Use test keys (ss_test_...) in development and live keys (ss_live_...) in production.

Authorization: Bearer ss_live_abc123xyz
X-SecureSign-Api-Key: ss_live_abc123xyz

Step 2 — Register Domain

Add your portal origin (e.g. https://portal.example.gov.in) to the domain whitelist. Deep-link callbacks are rejected if the origin is not registered.

Step 3 — Sign a Hash

Generate a SHA-256 hash of your document on your server, then redirect the browser to the SecureSign deep link. Use the same link on mobile and desktop — the OS opens Mobile App or Desktop Software automatically.

const params = new URLSearchParams({
  requestId: crypto.randomUUID(),
  hashBase64: sha256Base64,
  hashAlgo: 'SHA256',
  documentType: 'hash',
  callbackUrl: 'https://portal.example.gov.in/sign/callback',
  apiKey: 'ss_live_abc123xyz'
});
window.location.href = `securesign://sign?${params}`;

$params = http_build_query([
  'requestId' => bin2hex(random_bytes(16)),
  'hashBase64' => base64_encode(hash('sha256', $doc, true)),
  'hashAlgo' => 'SHA256',
  'documentType' => 'hash',
  'callbackUrl' => 'https://portal.example.gov.in/sign/callback',
  'apiKey' => 'ss_live_abc123xyz'
]);
header('Location: securesign://sign?' . $params);

import base64, hashlib, uuid, urllib.parse
params = urllib.parse.urlencode({
  'requestId': uuid.uuid4().hex,
  'hashBase64': base64.b64encode(hashlib.sha256(doc).digest()).decode(),
  'hashAlgo': 'SHA256',
  'documentType': 'hash',
  'callbackUrl': 'https://portal.example.gov.in/sign/callback',
  'apiKey': 'ss_live_abc123xyz'
})
redirect(f'securesign://sign?{params}')

Step 4 — Handle Response

After the user completes PIN authentication in SecureSign Mobile App or Desktop Software, your callbackUrl receives the signed payload:

{
    "requestId": "a1b2c3d4e5f6",
    "success": true,
    "signatureBase64": "MEUCIQDxxx...",
    "certificate": {
        "subjectCN": "Rajesh Kumar",
        "serialNumber": "4A3B2C1D",
        "validTo": "2027-01-01"
    },
    "signedAt": "2026-06-22T10:30:00Z"
}

Upload signatureBase64 to your backend and complete the portal-specific signing workflow.