eIDAS 2.0 and Qualified Electronic Signatures (QES) Explained

A Qualified Electronic Signature (QES) is the highest legal tier of electronic signature under the EU’s eIDAS Regulation, carrying the same legal effect as a handwritten signature, and eIDAS 2.0 extends the original framework with the European Digital Identity (EUDI) Wallet, which will let citizens hold and present qualified credentials, including QES, directly from a government-backed digital wallet.

A QES requires a Qualified Signature Creation Device and a certificate from a Qualified Trust Service Provider, giving it the same legal standing as a handwritten signature across the EU. eIDAS 2.0 builds on this by introducing the European Digital Identity Wallet, which will let citizens generate and present QES directly from a government-issued digital wallet rather than through a separate signing service.

Key Takeaways

• A Qualified Electronic Signature (QES) is the only eIDAS signature tier granted the same legal effect as a handwritten signature automatically across all EU member states.
• Creating a QES requires both a Qualified Signature Creation Device (QSCD) and a certificate issued by a Qualified Trust Service Provider (QTSP).
• eIDAS 2.0’s European Digital Identity (EUDI) Wallet is designed to let citizens hold qualified credentials, including the ability to produce a QES, directly within a government-backed digital wallet app.
• The European Commission’s target under eIDAS 2.0 is for 80% of EU citizens to actively use a digital identity wallet by 2030.
• A Qualified Certificate for electronic signature, the certificate type underpinning QES, is distinct from a Qualified Website Authentication Certificate (QWAC), which authenticates a website rather than a person.

What Makes a Signature “Qualified” Under eIDAS?

A signature qualifies as a QES only when it meets two specific requirements together: it must be created using a Qualified Signature Creation Device (QSCD), a certified hardware or software component that protects the signing key, and it must be backed by a Qualified Certificate issued by a Qualified Trust Service Provider that has passed an eIDAS compliance audit and appears on the EU Trust List. Meeting only one of these requirements produces an Advanced Electronic Signature (AES) instead, which does not carry the same automatic legal equivalence to a handwritten signature.

How Does the European Digital Identity Wallet Change QES Issuance?

Under the original eIDAS framework, obtaining a QES typically meant working with a specific Qualified Trust Service Provider’s separate signing platform. eIDAS 2.0’s EUDI Wallet is designed to embed qualified signing capability directly into a citizen’s government-issued digital identity wallet, so a QES could be produced from the same app used for other digital identity purposes, reducing friction between identity verification and signing in a single user flow.

What Is the Difference Between QES and other eIDAS Signature Tiers?

Tier	Legal weight	Requirement
Simple Electronic Signature (SES)	Minimal	Any digital mark, such as a typed name or a click-to-agree action
Advanced Electronic Signature (AES)	Moderate	Uniquely linked to the signer via a private key they control, but no QSCD/QTSP requirement
Qualified Electronic Signature (QES)	Equivalent to a handwritten signature	Requires both a Qualified Signature Creation Device and a Qualified Trust Service Provider’s certificate

What Is the Target Timeline For eIDAS 2.0 and the EUDI Wallet?

The European Commission’s stated goal is for 80% of EU citizens to actively use a digital identity wallet under eIDAS 2.0 by 2030, with member states required to offer at least one EUDI Wallet to their citizens as the framework rolls out. Organizations relying on QES today should plan for the EUDI Wallet to become an additional, increasingly common channel through which citizens produce qualified signatures, alongside existing Qualified Trust Service Provider signing platforms.

How Encryption Consulting Helps

How Encryption Consulting HelpsPKI Services help organizations implement Qualified Electronic Signature workflows today and plan for EUDI Wallet-based signing as eIDAS 2.0 rolls out, working with Qualified Trust Service Providers to issue the certificates QES requires. Backed by ISO/IEC 27001:2022 and SOC 2 certified practices.

Frequently Asked Questions

Is a Qualified Electronic Signature legally binding across the entire EU?

Yes. A QES is the only eIDAS signature tier granted automatic legal equivalence to a handwritten signature in every EU member state, without needing additional proof of intent or identity beyond the signature itself.

What is a Qualified Signature Creation Device (QSCD)?

A QSCD is a certified hardware or software component, evaluated against eIDAS’s technical requirements, that protects the private key used to create a Qualified Electronic Signature. It is one of the two mandatory requirements for a signature to qualify as a QES.

What will the European Digital Identity Wallet let citizens do?

Under eIDAS 2.0, the EUDI Wallet is designed to let citizens store identity credentials, health records, and banking details, and to produce a Qualified Electronic Signature directly from the wallet app, rather than through a separate Qualified Trust Service Provider signing platform.

Is an Advanced Electronic Signature the same as a Qualified Electronic Signature?

No. An Advanced Electronic Signature (AES) is uniquely linked to the signer through a private key they control, but does not require a Qualified Signature Creation Device or a Qualified Trust Service Provider’s certificate, so it does not carry the same automatic legal weight as a QES.

Implement Qualified Electronic Signatures Today

Take the next step PKI Services help you implement Qualified Electronic Signature workflows now and prepare for EUDI Wallet-based signing as eIDAS 2.0 rolls out. Explore PKI Services to get started.