# Check a mail's digital signature

To check a signed mail, open it and click **Verify Signature** next to the date. XgenPlus checks the signature against the sender's public key and shows "Good signature from" the sender, "Bad signature from" the sender, or that the public key is not available. A bad signature means the mail may have been altered or forged.

## How to check a mail's digital signature

1. Open the signed mail.
2. Click **Verify Signature** next to the date.
3. Read the result.

## When to use it

> The finance team at acme.in receives a signed mail changing a bank mandate. They click **Verify Signature**, see "Good signature from" the authorised signatory, and go ahead.

## Results

| Result | Meaning | What to do |
|---|---|---|
| Good signature | The mail came from the key owner and was not changed. | Proceed normally. |
| Bad signature | The mail was changed after signing, or was not signed by that sender. | Do not act on it. Confirm with the sender another way. |
| Public key not available | XgenPlus cannot check it. | Get the sender's public key. |

## Common questions

**It says the public key is not available. What does that mean?**

XgenPlus does not have the sender's public key, so it cannot check the signature. Ask the sender for their public key.


Source: https://docs.xgenplus.com/security/verify-a-digital-signature/