Open and Protect a QCDS Secure Signer Link

A QCDS signer invitation is a personal no-login access link for one participant and one Request. Treat it like a credential: keep it private, open it only from the intended device/browser context, and ask the sender to replace the link if it may have been exposed.

The Link Is Personal Transaction Access

QCDS does not require an external signer to create a Joomla account. Instead, the invitation contains a randomly generated personal token. QCDS stores only the SHA-256 hash of that invitation secret in the database; the raw token is returned only for delivery in the secure link.

The link is issued only for a participant who is currently available, opened, or in progress. By default it expires after 14 days unless the Request has an earlier/later explicit deadline, in which case the Request deadline controls the signing-link expiry.

What Happens When You Open It

  1. Open the invitation link directly from the message you received.
  2. QCDS verifies the token, Request state, participant state, and expiration.
  3. The invitation is exchanged into a separate hash-stored browser session. An ordinary active signer session lasts up to 24 hours but never beyond the invitation's effective expiry.
  4. QCDS loads only the immutable documents and fields assigned to that exact participant.
  5. If Identity Verification is required, complete it before QCDS enables signing actions.

The invitation itself remains reusable during its valid lifecycle, so reopening the same link can create a fresh browser/device session and resume the same participant. QCDS records invitation opens and resumes as evidence.

Why You Should Not Forward the URL

Possession of the link is part of the access control for the signing transaction. Do not forward it, publish it, paste it into a public ticket, or store it in shared notes. Identity Verification can add another assurance layer when configured, but it does not make a leaked invitation URL harmless.

When a Link Stops Working

QCDS blocks a link that was revoked or replaced, has expired, or belongs to a Request that is cancelled, voided, declined, failed, archived, reissued, or otherwise unavailable for signing. If the participant already completed signing, reopening the original invitation returns a truthful already-completed message instead of reopening editable signing access.

If the Link May Be Exposed

Contact the sender rather than continuing to use or share the suspect URL. QCDS can revoke or replace all still-usable invitation tokens and browser sessions for that participant without deleting saved signing progress. The sender can then issue a new invitation while preserving the Request history.

Community Discussion

Want to compare workflows, share practical tips, or discuss how you use this QCDS feature? Visit the QC Digital Signature Community. For private support, bug reports, account-specific issues, or feature requests, use the QuantaCade support system.