What Windows code signing really costs in 2026

Every page that ranks for this sells certificates. This one doesn't pick for you by commission: it lists what each route costs in the first year, token or cloud fee included, and who is allowed to buy it. Prices are read from each seller's page; every row says when we last checked it.

Prices checked on .

Find your route: four questions
Are you signing as a person or as a registered organization?

Is the project open source?
Do you sign in CI (cloud signing needed) or on your own machine (a USB token works)?

Sorted by first-year total, lowest first. Show highest first

OfferTypeWho can buyKey storageFirst-year total Signing limitChecked on
Microsoft: Microsoft Store distribution (MSIX)Store-signed packageApps distributed through the Microsoft Store as MSIX packages; Microsoft re-signs them. Developer registration is free for individuals since September 2025. MSI/EXE installers listed in the Store are not re-signed: you sign them with your own trusted certificate.Microsoft signs the package$0Freen/a
SignPath Foundation: Free code signing for open-source projectstermsOV, issued to SignPath Foundation: the publisher users see is SignPath Foundation, not you or your projectOpen-source projects under an OSI license with no commercial dual-licensing and no proprietary components, actively maintained and already released; every team member uses MFA, outside changes are reviewed, and each signing is approved by a team member. No security-scanning or hacking tools.Cloud (SignPath)$0FreePer SignPath's terms
Certum (Asseco): Open Source Code Signing in the Cloud (SimplySign)Individual, open sourceIndividual open-source developers; not for commercially distributed software (Certum revokes the certificate if it signs commercial software). Publisher shows as 'Open Source Developer, <your name>'.Cloud (SimplySign); no card or reader$58$58 incl. VAT on certum.store; the store showed it out of stock on 2026-10-17n/a
Certum (Asseco): Open Source Code Signing (card + reader set)eligibilityIndividual, open sourceIndividual open-source developers; not for commercially distributed software (Certum revokes the certificate if it signs commercial software). Publisher shows as 'Open Source Developer, <your name>'.Certum crypto card + reader (shipped)$80€69 incl. VAT for the set (certificate, crypto card, reader) ≈ $80; courier delivery extra. Sold as a 1-year product (Certum's 460-day notice names only its 2- and 3-year products as needing reissues); the page's '1 year / 2 years' is the hardware warranty.n/a
My-SSL (Certum reseller): Certum Standard code signing, SimplySign cloudOV / individualIndividuals and organizationsCloud (SimplySign); no token$99$99 for a one-year term5,000 signatures/month
Microsoft: Azure Artifact Signing, BasiceligibilityMicrosoft-issued (OV-equivalent identity)Organizations in the US, Canada, EU, UK, Australia, New Zealand, Japan, South Korea, Singapore, Switzerland, Norway and Israel; individuals in the US and Canada only. Needs a paid Azure subscription (no free or trial ones); an individual's Azure billing account name and address must match their government ID.Cloud (Microsoft-managed); no token$119.88$9.99/month5,000 signatures/month, then $0.005 each
My-SSL (Certum reseller): Certum EV code signing, SimplySign cloudEVRegistered organizations onlyCloud (SimplySign); no token$299$299 for a one-year term5,000 signatures/month
SSL.com: OV (or IV for individuals) code signing + eSigner Tier 1certificateOV / IVOrganizations (OV) or individuals (IV)Cloud (eSigner), a $379 YubiKey from SSL.com, or your own cloud HSM ($500+ attestation fee)$309$129 certificate (1 year; IV and OV the same) + $180/yr eSigner Tier 1 (240 signings, then $1 each). With a YubiKey token instead: $129 + $379 = $508.240 signings/year on Tier 1
SSL2BUY: Comodo (Sectigo) OV code signingOV / individualOrganizations and eligible individualsSafeNet USB token (shipped) or your HSM$340$300 on a 1-year term ($225/yr on 3 years) + $40 US token shipping ($80 international)n/a
SignMyCode: Certera OV code signingOV / individualOrganizations and individualsShipped token, or install on your own HSM$389.99$299.99 for 1 year + $90 token with US/Canada shipping ($130 international); $0 extra on your own HSMn/a
SSL Dragon: Comodo code signingtoken feeOV / individualOrganizations and individualsSectigo-shipped FIPS USB token (fee in the price), or your own compliant token or HSM (no fee)$414$319 for 1 year + $95 token with standard US shipping ($137 international, $147 expedited US); $0 extra on your own token/HSM. 3 years: $657.n/a
SSL Dragon: Sectigo code signingtoken feeOV / individualOrganizations and individualsSectigo-shipped FIPS USB token (fee in the price), or your own compliant token or HSM (no fee)$414$319 for 1 year + $95 token with standard US shipping ($137 international, $147 expedited US); $0 extra on your own token/HSM. 3 years: $657.n/a
SSL Dragon: GoGetSSL code signingtoken feeOV / individualOrganizations and individualsGoGetSSL-shipped USB token (fee in the price), or your own compliant token or HSM (no fee)$415$289 for 1 year (1-year term only) + $126 token with shipping, same price worldwiden/a
SignMyCode: Certera EV code signingEVRegistered organizations onlyShipped token, or install on your own HSM$469.99$389.99 for 1 year + $80 token with US/Canada shipping ($110 international)n/a
SSL Dragon: Sectigo (Comodo) EV code signingtoken feeEVRegistered organizations onlySectigo-shipped FIPS USB token (fee in the price), or your own compliant token or HSM (no fee)$504$409 for 1 year + $95 token with standard US shipping ($137 international); 3 years: $861. GoGetSSL EV at SSL Dragon: $369 + $126 token = $495.n/a
SSL Dragon: DigiCert code signingtoken feeOVOrganizationsDigiCert-shipped USB token (fee in the price), or your own compliant token or HSM (no fee)$526$400 for 1 year (1-year term only) + $126 token with shipping, same price worldwiden/a
SSL2BUY: DigiCert OV code signingOVOrganizationsDigiCert token ($120) or your own token/HSM$669$549 for 1 year + $120 tokenn/a
Microsoft: Azure Artifact Signing, PremiumMicrosoft-issued (OV-equivalent identity)As BasicCloud (Microsoft-managed); no token$1,199.88$99.99/month100,000 signatures/month
SSL.com: EV code signing + eSigner Tier 1certificateEVRegistered organizations onlyCloud (eSigner) or a $379 YubiKey$1,249$349 certificate (1 year) + $900/yr eSigner Tier 1 (120 signings, then $10 each). With a YubiKey ($379): $728, but SSL.com says a YubiKey may not meet EV kernel-driver needs.120 signings/year on Tier 1

Guides

Good to know

Since 2026-03-01 a publicly trusted code-signing certificate is valid for at most 460 days (CA/B Forum CSC-31); a 2- or 3-year purchase means free reissues, not one long certificate.

Since 2023-06-01 keys must live on a FIPS 140-2 Level 2 token or a cloud HSM, so the token or cloud-signing fee is part of the real cost.

EV no longer gets instant SmartScreen reputation (behaviour changed in 2024, per Microsoft's distribution feature-status page): OV and EV both build reputation over downloads. EV is still needed for kernel-mode drivers.

Sources