What Are KSeF Certificates
A certificate is a digital key that enables your company's authorization in the National e-Invoice System (KSeF). Without a certificate, you cannot send or receive invoices from KSeF.
Certificate Typesβ
| Type | Environment | Source | Use Case |
|---|---|---|---|
| Test Authorization | Test | Generated in the app | Authentication |
| Demo Authorization | Demo | Issued by KSeF / Qualified Seal | Authentication |
| Production Authorization | Production | Issued by KSeF / Qualified Seal | Authentication |
| Test Signing | Test | Issued by KSeF | Offline invoice signing |
| Demo Signing | Demo | Issued by KSeF | Offline invoice signing |
| Production Signing | Production | Issued by KSeF | Offline invoice signing |
Below is an official video explaining how to download the appropriate certificates from the KSeF system. (The video is in Polish but includes English subtitles β you can enable them in the YouTube player settings).
Certificate Types by Usageβ
| Type | Description |
|---|---|
Authorization (authorization) | Used to establish a session with KSeF (logging in, online submission, synchronization) |
Signing (signing) | Used for digital signing of invoices in offline (emergency) mode |
info
The same certificate can be used for both authorization and signing β simply add it twice with different types selected. Details: Signing Certificate.
How Authorization Worksβ
- The application uses your certificate to sign an authorization request.
- KSeF verifies the signature and returns a session token.
- The token is used for all operations (sending, fetching invoices).
- The token expires after a set period β the application refreshes it automatically.
Certificate Storageβ
Certificates are securely stored in the application database. The private key is encrypted and accessible only to your account.

Certificate Managementβ
In the certificates view, you can:
- π View a list of saved certificates.
- β Add a new certificate (authorization or signing).
- π Generate a test certificate.
- β¬οΈ Download a certificate or private key.
- π Navigate to the KSeF portal (link available in the context menu).
- ποΈ Delete a certificate.