ExistBefore creates cryptographic proof that a specific file existed at a specific time. It is public, free, and account-less, powered by the CertiSigma trust infrastructure.
1
Hash on your device
Your file stays in the browser. We compute SHA-256 locally. Nothing except the hash is transmitted.
2
Register the fingerprint
The 64-character hex hash goes through a server-side proxy that adds the API key. The CertiSigma API never sees your original content.
3
Get your certificate
You receive an immediate T0 signature, a PDF you can share, and a link to check T1 and T2 as they complete.
What crosses the network
Network boundary: only the SHA-256 digest crosses the network. The proxy injects the API key server-side; your file bytes and the API key never meet in the browser.
How the proof grows over time
T0 is created immediately. T1 and T2 strengthen the same T0 fingerprint over time; they do not require the original file to be uploaded again.
Important: T1 and T2 strengthen the same T0 fingerprint. They do not change the attested content and they do not require the original file to leave your browser.
T0
Immediate receipt
Immediate
ECDSA P-256 over the attestation payload. It proves CertiSigma registered this SHA-256 digest at T0.
Adds: an immediate signed record and a PDF receipt you can keep.
Limit: it does not prove ownership, authorship, copyright, novelty, or what the file contains.
T1
Qualified timestamp
~1 hour
Merkle batch + RFC 3161 TSA. A qualified timestamp is added to the same attestation record.
Adds: an independent time source from a qualified trust service provider.
Limit: it reinforces when the digest existed; it still does not certify authorship or rights.
T2
Bitcoin anchor
24–48 hours
OpenTimestamps anchors the same record to Bitcoin once confirmations are available.
Adds: public long-term verifiability that does not depend on a single operator.
Limit: Bitcoin anchors the digest timeline, not the identity, intent, or legal rights of a person.
PDF and verification
The PDF is a human-readable container for the cryptographic data — not the root of trust itself. You can verify independently by recomputing the hash and checking the signature, or use the public API.
ExistBefore is powered by the CertiSigma API — the same endpoints are available for integration into legal tech, document management, and creative tools. API documentation →