Collecting a signed Form 8879 used to mean printing, mailing, or asking the client to come in. Today most preparers handle it electronically — but Form 8879 isn't an ordinary document, and the IRS has specific rules about how it can be signed remotely. This guide explains those rules in plain English so you can collect signatures online with confidence.
What Form 8879 Is
Form 8879, the IRS e-file Signature Authorization, is how a taxpayer authorizes an Electronic Return Originator (ERO) to electronically file their return and, where applicable, to enter or generate the taxpayer's PIN. You must have a completed, signed 8879 before transmitting the return. It's not filed with the IRS, but you're required to retain it.
Can Form 8879 Be Signed Electronically? Yes — With Conditions
The IRS permits electronic signatures on Form 8879. The key condition is identity verification: when the taxpayer signs remotely (not in your physical presence), the software you use must verify that the person signing is who they claim to be. This requirement is what separates a compliant 8879 e-signature from simply emailing a PDF to be signed.
The Approved Identity-Verification Methods
Under IRS Publication 1345, remote e-signing of Form 8879 must use an identity-verification method such as the following:
1. Knowledge-Based Authentication (KBA)
The taxpayer answers a set of "out-of-wallet" questions generated from public and credit-history records — details that, in theory, only they would know. KBA has been the traditional method and is what many older e-signature tools use. Its weakness is reliability: when public-records data is thin, outdated, or affected by a data breach, legitimate taxpayers can fail the quiz and get locked out. See our explainer on knowledge-based authentication for how the questions are generated and where it tends to fail.
2. Document + Selfie (Identity Assurance Level 2)
The taxpayer photographs a government-issued photo ID — a driver's license, state ID, or passport — and takes a live selfie or short video that is matched to the ID. When performed by a service that meets NIST Identity Assurance Level 2 (IAL2), this is an IRS-accepted method for remote 8879 signing. It tends to be more reliable for the signer than KBA and is increasingly common, especially when a client struggles to pass knowledge-based questions.
3. Digital Certificates
A trusted third party issues the taxpayer a digital certificate that verifies their identity. This is less common in everyday tax practice but is a recognized approach.
The In-Person Exception
Identity verification of this kind applies to remote transactions. If the taxpayer signs in your physical presence, you can verify identity the traditional way — for example, by reviewing a government-issued photo ID in person — without the remote KBA or document-and-selfie step.
There is also a narrower allowance recognized in IRS guidance for long-standing, in-person relationships. Because the specifics matter, confirm the current requirements in the IRS guidance before relying on any exception, and document how you verified identity in each case.
How Often Do You Have to Verify?
Identity verification is required each time a taxpayer e-signs Form 8879 for a remote transaction — it isn't a one-time setup you can reuse season after season. The multi-year business relationship allowance that preparers often have in mind applies only to in-person transactions, so it does not remove the verification step from a remote signing, no matter how many seasons the client has been with you. Build your process around verifying at the moment of each remote signature rather than assuming a prior check carries forward.
Record-Keeping
Retention runs on two different clocks, and it is worth keeping them straight. The signed Form 8879 is retained three years from the return due date or the IRS received date, whichever is later. The other e-file materials — Form 8453 and the documents that go with it, copies of Forms W-2, W-2G, and 1099-R, the taxpayer consents, the copy of the return, and the acknowledgment file — are kept until the end of the calendar year. With electronic signing, keep the completed, signed document together with a record of the identity-verification result and the signing audit trail. A good e-signature system stores all of this automatically, and our walkthrough of IRS Publication 1345 covers both retention clocks alongside the rest of the handbook's e-signing rules.
Putting It Into Practice
For most preparers, the practical path is simple: use an e-signature tool that builds the identity verification directly into the signing flow, so the taxpayer can't open and sign the 8879 until they've verified. That keeps you compliant without managing a separate verification step, and it stores the signed form and audit trail for your records. See our comparison of e-signature tools for tax preparers for how the leading options handle this requirement.
FinishTax includes this out of the box: choose the identity rung per envelope, up to government ID + selfie verification at NIST IAL2, and the client completes it before the document unlocks — with no separate per-return signing subscription. If you've been juggling a standalone e-signature product alongside everything else, folding it into your practice tool removes a moving part. See our security page for how the encryption and audit trail behind this actually work.