A Form 8879 e-signature is allowed if your software verifies identity and logs the signing evidence. For remote signers, IRS Publication 1345 requires a record check and knowledge-based authentication. After three failed attempts you need a handwritten signature. A handwritten 8879 returned by email, fax or website does not count as a remote e-signature transaction, so no KBA applies to it.
Key takeaways
- Publication 1345 allows Form 8879 e-signatures only when both the software and the ERO meet its identity verification requirements.
- Remote e-signing means a record check plus knowledge-based authentication, and each spouse on a joint return is verified separately.
- A handwritten 8879 sent back by mail, fax, email or website is outside the remote e-signature rules.
- Three failed KBA attempts means you must obtain a handwritten signature instead.
- Changes above $50 to total income or AGI, or $14 to total tax, withholding, refund or amount owed, require a new declaration.
- Keep each signed form for three years from the return due date or IRS received date, whichever is later.
What does the IRS actually require for a Form 8879 e-signature?
Form 8879 lets an Electronic Return Originator (ERO) enter a taxpayer's PIN on an individual return. The taxpayer has to review the return, confirm the figures on the form match, then sign and date it before you originate the electronic submission. That sequence applies however the signature is captured.
The detailed rules sit in IRS Publication 1345, the handbook for authorized e-file providers. The current edition, revised December 2025, says no specific signature technology is required. A typed name, a stylus mark, a signature pad or a digital signature can all qualify. What the IRS cares about is whether the process proves who signed and whether the signed record stayed intact.
So the question to ask of a tool is not "is this a legal e-signature?" but "does it meet the identity and evidence requirements in Publication 1345?" A generic signing app can produce a binding contract signature and still fall short for an 8879.
Which signing route should each client take?
Most articles on this topic treat remote e-signing as the only digital option. It isn't. Publication 1345 states that a remote e-signature transaction does not include handwritten signatures on Forms 8878 or 8879 sent to the ERO by hand delivery, mail, private delivery service, fax, email or an internet website. A client who prints, signs and uploads a scan is using a different route, and it carries no KBA step.
That gives you three routes, and it helps to assign one deliberately rather than letting each client improvise.
| Client situation | Best route | Identity step | Watch out for |
|---|---|---|---|
| Remote client with a US credit file, comfortable online | Remote e-signature in KBA-enabled software | Record check and KBA, for each taxpayer | Credit-based questions can fail for thin files |
| Recent immigrant, young adult or expat client | Handwritten form returned by secure upload | No KBA for this route | Slower if they have no printer |
| Client sitting in your office | In-person e-signature on your device | Inspect government photo ID, unless a multi-year relationship applies | Record name, SSN, address and date of birth |
| Anyone who has failed KBA three times | Handwritten signature | Required fallback | Allow time before the deadline |
What identity checks apply to remote and in-person signers?
For a remote transaction, where you are not physically with the client, you record the name, Social Security number, address and date of birth. Those details must then be checked against records from an agency, institution, credit bureau or similar database. Identity verification has to meet NIST Special Publication 800-63 Level 2 with knowledge-based authentication, or a higher assurance level.
For an in-person transaction, you inspect a valid government photo ID, compare the photo to the person and record the same four data points. The confirmation can be skipped when there is a multi-year business relationship, which the IRS defines as having originated a return for that taxpayer in a prior year and identified them using this process. A long friendship does not meet that test on its own.
Joint returns catch people out. If there is more than one taxpayer, the process must separately identify and authenticate each one. Sending one link to a shared email address, then having one spouse click through twice, is the failure pattern to design out.
What evidence must the signing software record?
The ERO must be able to hand this information to the IRS on request, so check it exists before filing season rather than during an inquiry. Publication 1345 lists the following:
- A digital image of the signed form
- The date and time of the signature
- The taxpayer's IP address (remote only)
- The taxpayer's login username (remote only)
- Passed KBA results, plus confirmation of photo ID for in-person signing
- The signing method used, or a system log or audit trail showing completion
The signature must also be linked to its record so it cannot be copied or transferred, and the signed record must be locked against change. Storage needs access control, indexing, and the ability to reproduce legible copies.
Keep the completed form for three years from the return due date or the IRS received date, whichever is later. Don't send it to the IRS unless asked.
What happens when a client fails KBA?
The rule is short: after three failed attempts, you must obtain a handwritten signature on the form. The questions usually come from credit report data, so failures cluster among people with little US credit history, those who recently moved, and older clients who no longer remember an old loan.
Your software should also tell clients that a credit-based check may create a soft inquiry, how it may appear, and that the IRS won't see the credit report. Publication 1345 says no extra consent is needed for that check beyond those obtained for preparing and filing. A short note in your signing email saves a lot of nervous phone calls.
The practical risk is timing. A failure on the morning of April 15 leaves a client hunting for a printer while your filing window closes, so ask clients to sign as soon as the return is ready and give a stated internal deadline several days ahead of the real one.
When does a client have to sign Form 8879 again?
A new declaration is needed when electronic return data changes after signing and the amounts differ by more than $50 to total income or AGI, or by more than $14 to total tax, federal income tax withheld, refund or amount owed. Those limits are small enough that a late corrected 1099 will usually trip them.
Worked example: one late K-1 across a 400-return firm
These figures are illustrative. Take a firm filing 400 individual returns, with 280 clients signing remotely. If 6% of those fail KBA, 17 clients fall back to a handwritten form. If 5% of all returns change after signing, 20 clients need to sign again.
Now take one of those clients. A signed return shows AGI of $92,400 and a refund of $2,310. A late K-1 adds $400 of income and cuts the refund to $2,222. The AGI change of $400 is over the $50 limit and the $88 refund change is over the $14 limit, so the signature no longer stands. If a staff member spends 20 minutes per exception, those 37 cases cost over 12 hours in peak season. Tracking who has signed which version is the part worth systematizing.
A pre-season checklist for your signature process
Run through this before January. It takes about an hour and it surfaces most of the gaps.
- Confirm your tax software or signing tool supports KBA for Forms 8878 and 8879, and get the answer in writing.
- Sign a test return as a joint filer and confirm each spouse is verified separately.
- Pull the evidence record for that test and match it against the Publication 1345 list above.
- Decide your default route for each client group, and tag thin-file clients in advance.
- Write the fallback message for a KBA failure, with instructions for the handwritten route.
- Set a rule that any post-signature change is checked against the $50 and $14 limits before transmission.
- Confirm your storage can reproduce a readable copy three years later.
Business and fiduciary returns use their own variants, such as Form 8879-PE. Check the instructions on the specific form, as well as the current Form 8879, and speak to your software provider or a professional adviser where your circumstances differ.
What should your signing email say?
Most KBA calls come from clients who weren't warned. A short message sent with the return heads off the bulk of them. Adapt this wording to your own process and software:
Your 2025 return is ready. Please review it, check that the figures on Form 8879 match, and sign by March 28 so we have time to file. You'll answer a few identity questions drawn from credit and public records. This may appear as a soft inquiry on your credit report, and the IRS doesn't see your report. If you're filing jointly, each of you signs separately. If the questions don't work after three tries, reply to us and we'll send you a form to sign by hand and upload.
Four details in that message do real work. It sets a date ahead of the deadline. It tells clients to compare the form with the return, which the IRS requires. It explains the credit inquiry before anyone is alarmed by it. And it gives a calm next step for failure, so nobody feels locked out.
Don't forget your own side of the signature. Publication 1345 says EROs must also sign with a PIN and should use the same PIN for the entire tax year. The ERO may authorize firm members or designated employees to sign for them but stays responsible for the electronic returns, so put that authorization in writing, and review it each season when staff change.
How Zaquil handles Form 8879 signature collection
Be clear on the split first. Zaquil's portal e-signature produces a signed PDF certificate, which suits engagement letters, consents and return approvals. KBA isn't part of its listed capabilities, so a remote e-signed 8879 should run through your KBA-enabled tax software, or the client can return a handwritten form through the portal, the route Publication 1345 puts outside remote e-signature rules.
The workflow around the signature is where it helps:
- What the client sees: one branded portal showing the return to review, an approval step, and a request to upload the signed 8879, with no attachments buried in email.
- What the firm sees: each return as a job on a kanban board, with a checklist step for review, signature received and transmitted.
- Chasers: automations send reminders until the upload arrives, and move the job to the next stage when it does.
- Billing: the final invoice can be paid online, and you can lock a document until it is paid.
- Replies: questions from email, SMS or WhatsApp land in one inbox, against the client record, with AI drafts from your knowledge base for you to check.
See how this fits together on the accounting and tax setup. Plans start at $19 a month, with a 14-day free trial and no credit card to start, so you can test the flow on a handful of real returns before January.
Frequently asked questions
Can a client sign Form 8879 electronically?
Yes. IRS Publication 1345 lets taxpayers use electronic signatures on Forms 8878 and 8879 if the software supports it and both the software and the ERO meet the identity verification rules. Remote signers need a record check and knowledge-based authentication, while in-person signers show government photo ID unless a multi-year relationship applies.
Is KBA required for Form 8879?
KBA is part of the identity verification for an electronic signature, including remote transactions, unless a higher assurance level is used. It does not apply when a client returns a handwritten signature by mail, fax, email or website, because Publication 1345 excludes those from the definition of a remote e-signature transaction.
Can a client email a signed Form 8879 back to me?
Yes. Publication 1345 says the taxpayer may return the completed form by hand delivery, US mail, private delivery service, fax, email or an internet website. Given the personal data on the form, a secure upload is a safer choice than ordinary email, and your own security plan should say which you allow.
What happens if a taxpayer fails KBA three times?
The ERO must obtain a handwritten signature on Form 8878 or 8879. The taxpayer can then print, sign and return the form by any permitted delivery method. Plan for this by telling clients about the fallback in advance and asking for signatures well before the filing deadline.
How long do I keep a signed Form 8879?
Keep it for three years from the return due date or the IRS received date, whichever is later. Do not send it to the IRS unless asked. Electronic retention is allowed if your records can be retrieved and reproduced as legible copies, so test this on an older file.
Does each spouse need to pass identity verification on a joint return?
Yes. Publication 1345 says that where there is more than one taxpayer for the electronic record, the signing process must be designed to separately identify and authenticate each taxpayer. In practice, that means separate credentials and a separate KBA session for each spouse, ideally using two separate email addresses.
When does a change to the return require a new Form 8879?
A new declaration is needed when amounts differ by more than $50 to total income or AGI, or more than $14 to total tax, federal income tax withheld, refund or amount owed. Check any post-signature change against those limits before you transmit the return.
Is a typed name a valid signature on Form 8879?
A typed name is among the methods Publication 1345 lists as acceptable, along with signature pads, stylus marks, digitized images, shared secrets and digital signatures. The method alone is not enough. It must sit within a process that verifies identity, records the required evidence and locks the signed record.
Do I need ID checks for a client I have served for years?
For in-person signing, the ERO must confirm identity unless there is a multi-year business relationship, meaning you originated a return for that taxpayer for a prior year and identified them using the described process. That exception is worded for in-person transactions, so remote signing still follows the remote rules.
Will a KBA check hurt my client's credit score?
A credit reporting company may generate the questions, and this can create an entry called a soft inquiry. The software should explain whether one is created and any effect on the report, scores and lenders. It should also say that the IRS does not get access to the credit report.
Run this part of your business in one place
Zaquil puts every email, document, approval, invoice, call and automation for your accounting and tax setup in a single workspace — set up for US practices on day one.
- Client portal with document requests, organisers, e-signatures and online payment
- Jobs with templates, checklists and recurring work; invoices and unbilled time
- One inbox for email, chat, SMS, WhatsApp and calls across every brand