DSC and DIN: what they are, and which one you actually need.

What is a DSC, and what is a DIN?

A Digital Signature Certificate (DSC) is an electronic credential — usually stored on a USB token — that lets a person sign documents filed online with the same legal standing as a physical signature. It's issued by a Certifying Authority (CA) licensed by the Controller of Certifying Authorities (CCA), and it's what actually gets used at the moment of filing: MCA forms, GST returns, income-tax filings, e-invoices, tender documents and more all accept DSC-based signing.

A Director Identification Number (DIN) is different in kind — it's not a signing credential, it's an identity number. Once allotted by the Ministry of Corporate Affairs (MCA), a DIN permanently identifies one individual as a director, across every company they're a director of, for life. It doesn't sign anything; it's referenced on every filing that names that person as a director.

The confusion is understandable: both are MCA-adjacent, both are usually obtained around the same time (at incorporation, or when someone is appointed a director), and both are prerequisites for a company to function on paper. But one answers "who is this person" (DIN) and the other answers "did this person actually sign this" (DSC).

DSC vs DIN, side by side

Class of DSC matters in practice: most MCA and GST filings require a Class 3 DSC (the highest assurance level currently issued for individuals), often combined with the applicant's PAN and, for company filings, an organisational DSC in some cases. Exact class requirements and validity tenures offered by Certifying Authorities do shift — verify the current requirement on the MCA/GST portal or with your Certifying Authority before advising a client.

How to apply for a DSC

The process is broadly the same across licensed Certifying Authorities, though the exact screens differ:

• Choose the class and validity. Class 3, individual (or organisation) type, typically for a 1, 2 or 3-year tenure.
• Complete identity verification. Most Certifying Authorities now offer Aadhaar-based e-KYC or a video verification call in addition to the older paper route (self-attested PAN and address proof, photograph, and a witness attestation).
• Pay the issuance fee — this varies by Certifying Authority, class and tenure, so check the current fee on the CA's own portal rather than relying on a fixed figure.
• Receive the token or download the certificate. The DSC is delivered either pre-loaded on a USB crypto token couriered to the applicant, or as a downloadable certificate you load onto your own token, depending on the provider.

Once issued, the DSC has to be registered separately on each portal where it will be used — the MCA portal, the GST portal, the income-tax e-filing portal — before it can actually sign a filing there. Registering it on one portal does not automatically register it on another.

How to apply for a DIN

There are two routes, depending on whether the person is a founding director or joining an existing company:

• At incorporation — via SPICe+. For a new company's first directors (up to the number the form allows), the DIN application is embedded inside the SPICe+ incorporation form itself. There's no separate DIN filing — MCA allots the DIN as part of approving incorporation, using the same identity and address documents submitted for incorporation.
• For an existing company — Form DIR-3. When someone is being appointed a director of a company that already exists, they file Form DIR-3 (or its current equivalent on the MCA portal) with identity proof, address proof, a photograph and a declaration, digitally signed with their own DSC and countersigned by a director or company secretary of the company they're joining, and typically certified by a practising professional (CA/CS/CMA).

A person can hold only one DIN in their lifetime, however many companies they later become a director of. Applying for a second DIN when one already exists is not just redundant — it's a compliance offence with its own penalty and surrender process, so always check MCA's DIN database for an existing number before filing a fresh DIR-3.

Validity and renewal — the part that trips people up

A DSC expires. Depending on the tenure purchased, it typically runs 1–3 years, after which the signatory needs a fresh certificate (Certifying Authorities usually offer a streamlined renewal flow using the previous DSC's KYC, but it's still a new issuance, not an automatic rollover). Track expiry dates for every signing director and authorised signatory — a lapsed DSC blocks filings at the worst possible moment, typically just before a due date.

A DIN does not expire. Once allotted, it's permanent. What it does require, every financial year, is Form DIR-3 KYC — a KYC refresh (Aadhaar-OTP based for a straightforward, unchanged-details case; the fuller form if details have changed) filed within the due date MCA notifies each year. Miss it, and the DIN is marked "Deactivated due to non-filing of DIR-3 KYC" — the director can't be validly appointed or continue functioning as a director on any filing until it's revived, along with the applicable late fee. This is the single most common DIN-related lapse practising CAs see, precisely because it's easy to forget for a director who isn't personally handling any other filing that year.

Fee amounts, form numbers and prescribed due dates for DSC issuance and DIR-3 KYC change from time to time — always verify the current figures on the MCA portal, the GST portal, or with your empanelled Certifying Authority before quoting a client.

Practical notes for a practising CA

• Maintain a DSC and DIN register per client — issuing/certifying authority, class, issue date, expiry date, and DIR-3 KYC status — separate from the general compliance calendar, because DSC expiry and DIR-3 KYC run on their own clocks unrelated to the company's own filing due dates.
• Check for an existing DIN before filing DIR-3 for anyone who has ever been a director anywhere, including a struck-off or dormant company — the MCA DIN master data search catches most duplicates before they become a penalty problem.
• Register the DSC on every portal it's needed on separately — a director's DSC being valid and registered on MCA doesn't mean it's registered on the GST or income-tax portal; confirm before a filing deadline, not on the day of.
• Token vs downloadable certificate — some Certifying Authorities issue only a hardware token; if a client works across multiple systems or from a laptop without a USB port, confirm the format before purchase.
• DIR-3 KYC for inactive directors is still mandatory — clients sometimes assume a director who resigned or a company that's dormant is exempt. It isn't, until the DIN is formally surrendered or the company's status changes; flag this every year regardless of activity level.

Where TatvaBooks fits

TatvaBooks doesn't issue DSCs or file DIN applications — those stay with your empanelled Certifying Authority and the MCA portal. Where it helps is downstream: once directors and signatories are set up, a firm running compliance for multiple clients needs a place to track recurring dates like DIR-3 KYC and DSC expiry alongside GST and tax due dates, without it living in a spreadsheet someone forgets to open. If that's a gap in your current setup, the Practice plan is built for exactly this multi-client tracking — see pricing or book a CA demo.

Frequently asked questions