Security architecture

Security decides whether a result can be defended. One-time password verification with an expiry and a single use, credentials that are never stored in plain text, and controls that run on the server rather than on the voter's screen.

6 digits
One-time password
Sent only to the registered phone or email
10 min
Expiry, then it is dead
An expired code can never be used
1 use
Marked used on verify
A leaked code cannot be replayed

One-time password verification

Phone OTP, email OTP or both. Codes are hashed before storage, the login screen gives the same neutral response whether an account exists or not, and a registrar can issue a temporary credential in person.

Credential storage

Every password, including admin credentials and temporary ICT desk passwords, is hashed before storage. Nothing is kept in plain text, one-time codes included.

Brute-force protection

Voter, admin and platform logins each run behind their own rate limiter. Repeated failures lock the account before code guessing gets far.

Vote integrity and anti-fraud controls

Vote submission runs inside a database transaction, a hard per-device limit stops one phone voting for several members, and election status is computed from declared dates rather than a switch someone can flip.

Session management

Logging out invalidates the session token on the server immediately. A stolen token cannot be replayed after the member has signed out.

Audit trail

Every login, vote and administrative action is recorded with real device and browser detail and a server timestamp, and exports to CSV at any time for your committee, board or auditors.

A recount re-checks the count. An audit trail proves the process.

Disputes are settled from the record, not from a recount. The records themselves are covered on the audit trail page.
See how the audit trail works

Ready to run your next election on EasyPoll?

We walk your committee through the platform with a sample election using your branch structure, then configure your branded instance and member register.

Phone: 0729 710 859 / 0719 764 485 Email: [email protected] Web: www.easypoll.co.ke