Form 8879 is the IRS e-file Signature Authorization — the document a taxpayer signs to authorize an Electronic Return Originator to enter or generate their PIN on an electronically filed return. It is never filed with the return. The ERO retains it for three years, and must obtain it before transmitting. Electronic signatures are permitted, but only if the ERO meets specific identity-verification and data-capture requirements in Publication 1345.
That last sentence is where firms get into trouble. Emailing a PDF and getting a typed name back is not, on its own, a compliant e-signature.
What Form 8879 does
An e-filed return still needs a signature. Because the taxpayer is not signing a paper 1040, the IRS uses a PIN. Form 8879 is the taxpayer's written authorization for the ERO to apply that PIN on their behalf, and their declaration that they reviewed the return and it is accurate.
| Method | How it works | Form 8879 required? |
|---|---|---|
| Practitioner PIN | The ERO enters the PIN. No prior-year AGI needed from the taxpayer. | Yes — always |
| Self-Select PIN, taxpayer enters own PIN | Taxpayer chooses a PIN and authenticates with prior-year AGI or prior-year PIN. | No |
| Self-Select PIN, ERO enters it for them | ERO enters the taxpayer's self-selected PIN. | Yes |
Most professional practices use the Practitioner PIN method, which means Form 8879 on essentially every return.
Related forms
- Form 8878 — signature authorization for extension requests (Forms 4868 and 2350) where a payment is being made by electronic funds withdrawal.
- Form 8879 series — business return variants exist for partnership, corporate, and other entity returns; the retention and signature principles are similar.
The rules that matter most
- Get it before you transmit. The taxpayer must review the return and sign the authorization before the ERO submits. Transmitting first and collecting the signature afterward is a violation, not a paperwork lag.
- Do not mail it to the IRS. Form 8879 is retained by the ERO and submitted only if the IRS specifically requests it.
- Retain for three years. Measured from the return due date or the date the IRS received the return, whichever is later. Electronic retention is permitted provided records stay complete, legible, and retrievable.
- Both spouses sign on a joint return. Each signature must be obtained and verified separately.
- Re-sign after material changes. If the return changes after signing in ways that alter the amounts on the 8879 beyond the narrow tolerances the IRS allows, you need a new signed authorization.
Electronic signatures: what Publication 1345 requires
The IRS permits electronic signatures on Form 8879, but attaches two sets of conditions: verifying who the signer is, and capturing evidence of the signing event.
Identity verification
In person. The ERO must inspect a valid government-issued photo identification and compare it with the taxpayer, recording the identification details.
Remote. The requirements are meaningfully stricter. The ERO must:
- Record the taxpayer's name, Social Security number, address, and date of birth
- Verify that information against records held by a third party — a credit bureau, financial institution, or similar source
- Complete a knowledge-based authentication check, in which the taxpayer answers questions drawn from public and proprietary records that a stranger would be unlikely to know
Publication 1345 provides limited relief for taxpayers with an established multi-year relationship with the ERO, where identity has been verified previously. The exact conditions matter, and the text has been revised over time — confirm the current wording in the live publication before relying on it for returning clients.
Data the e-signature record must capture
Whatever platform you use must record and retain:
- A digital image of the signature, or the taxpayer's typed name in the signature block
- The date and time of the signature
- The taxpayer's IP address, for remote transactions
- The taxpayer's login identification, where applicable
- The identity verification method used, including KBA results
- The method used to sign the record
The practical implication: a generic e-signature tool that returns a signed PDF and a basic certificate may not capture everything on this list. Ask your vendor which of these fields they record and how you export them, before filing season rather than during an examination.
Common failure modes
| Practice | Problem |
|---|---|
| Emailing the 8879 as a PDF attachment for signature | Unencrypted transmission of taxpayer data, and typically no KBA or IP capture |
| Transmitting before the signature arrives to beat a deadline | Direct violation — the authorization must precede transmission |
| Accepting one spouse's signature on a joint return | Both signatures required, each verified |
| Using a generic e-signature tool with no KBA | May not satisfy remote identity verification |
| Storing signed forms in a shared drive with no access control | Retention may be fine; the safeguards likely are not |
| Purging after the filing season | Three-year retention runs from the due date or IRS receipt date, whichever is later |
Frequently asked questions
Do I mail Form 8879 to the IRS?
No. The ERO retains it and provides it only if the IRS requests it. Sending it in is a common new-preparer mistake.
How long must I keep Form 8879?
Three years from the return due date or the date the IRS received the return, whichever is later. Electronic storage is acceptable if the records remain complete and retrievable.
Can my client sign Form 8879 electronically?
Yes, provided you meet the Publication 1345 identity-verification requirements and your system captures the required signature data. For remote signing this generally includes knowledge-based authentication and recording the taxpayer's IP address.
Is DocuSign or a similar tool enough on its own?
Not automatically. A general-purpose e-signature product satisfies the signing mechanics, but the IRS requirements are about identity verification and the specific data captured. Many vendors offer a tax-specific configuration that adds KBA. Confirm what your configuration actually does rather than assuming the brand covers it.
What if the return changes after the client signs?
If the change affects the amounts reported on the 8879 beyond the limited tolerances the IRS permits, obtain a new signed authorization before transmitting. Small non-substantive corrections may not require re-signing — check the current instructions.
Does the taxpayer have to review the return first?
Yes. The taxpayer must be given the return to review and must verify the information before signing. The signature is a declaration that they did so, which is exactly what an examiner will test if the return is later disputed.
What about business returns?
Separate 8879-series forms exist for entity returns, with their own instructions. The core principles — signature before transmission, ERO retention, no filing with the return — carry over.
Where XyloDocs fits
XyloDocs is an AI tax workflow platform for tax firms. Documents and signature requests move through one system rather than an email thread: clients receive requests by SMS, WhatsApp, email, or secure portal, e-signature is available as an add-on, and everything lands organized by client and tax year with encryption, access controls, and a complete audit trail.
An important limit worth stating plainly: using a secure platform does not by itself satisfy Publication 1345 identity verification. Whether your signing workflow meets the remote KBA requirement depends on how it is configured, and the responsibility stays with the ERO. Validate your specific setup against the current publication.
See the full feature set including e-signature and pricing for the eSigning add-on, or read our companion guides to IRS Pub 1345 Online Provider requirements and EFIN vs ETIN vs PTIN.
Last verified: August 9, 2026 This article is general information about IRS e-file signature rules, not legal advice. Publication 1345 is revised periodically — verify current identity verification and retention requirements against the publication on irs.gov.
Leave a Comment
Your comment is private and will only be visible to the author. We'll send you an email confirmation.