New voting options, a contentious race and a global pandemic have turned the 2020 presidential race into an election unlike any other in modern memory. Where, when and how to vote is a complicated, individual decision that depends on how votes are counted in one’s state, a voter’s risk factors for COVID-19 and a variety of other variables.
J. Alex Halderman, professor of computer science and electrical engineering and one of the nation’s foremost experts on election security, offers tips that can help Americans ensure that their votes are recorded accurately and securely.
1. Avoid voting methods that don’t have a paper trail
It’s well known that electronic voting machines are vulnerable to hacking — even if they’re not connected to the internet. And electronic voting machines that don’t provide paper verification offer no way to verify that your vote has been recorded correctly. There’s also no way to recount votes in the event of an error or malfunction. Halderman demonstrated this in a collaboration with The New York Times in 2018.
“States have made a lot of progress in decommissioning completely paperless voting machines, but around 15 percent of the electorate will still vote paperlessly in November,” Halderman said. “If you’re one of those voters, you might consider voting by mail. That will create a paper record of your vote that can be recounted.”
In-person voting is still paperless in at least parts of Indiana, Kansas, Kentucky, Louisiana, Mississippi, New Jersey, Tennessee and Texas.
2. If you use a ballot-marking device at the polls, review your printout
Ballot-marking devices are machines — usually touch screens — that let voters fill out their ballot electronically and then get a printout of their vote, which is then scanned by a computer. They’re helpful for people who can’t hand-mark a ballot. But some jurisdictions have begun using ballot-marking devices for every voter.
“The problem with every voter using ballot-marking devices is that an attacker could compromise them and program them to produce ballots that don’t reflect the voters’ choices,” Halderman said. “A study I did last summer showed that almost 95 percent of voters don’t review their printouts closely enough to make sure they’re correct.”
Luckily, voters can be a part of the solution. If you vote using a ballot-marking device, scrutinize the printout and tell a poll worker if any selection isn’t right. All voters in Arkansas, South Carolina, Georgia, California’s Los Angeles County and Philadelphia will vote using ballot-marking devices.
3. Don’t vote online
There’s pressure on election officials to provide easier ways to vote remotely this year. And some states have responded by allowing increasingly large fractions of the public to cast ballots online.
But the risks of online voting are extremely high. It’s impossible to guarantee security. The voter’s own device could have been compromised by attackers in a way that will change a vote as it’s submitted. Or the server-side system could be hacked into in various ways to change the vote before it’s counted. Beyond those vulnerabilities, the technology that states are looking at now doesn’t provide any way for the voter or election officials to verify that the intended vote is actually what gets counted.
“Voters should absolutely avoid voting online if any alternative is available,” Halderman said. “It’s much safer to vote by mail than to cast your vote over the internet under any circumstances.”
At least some voters will have the option of voting online in West Virginia and Delaware.
4. Be patient on election night and afterward
Due to the pandemic, many states have changed their procedures or rules on who can vote by mail. And those last-minute changes make it more likely that some things will go wrong on Election Day. We may not know the results on election night or even for a number of days afterwards, unless it’s a landslide outcome.
“We should expect some potholes on Election Day,” Halderman said. “But those problems don’t necessarily mean that the election result will be stolen or that the election is being attacked.”
5. Encourage your state to do a risk-limiting audit in future elections
The most efficient method of confirming that election results are correct is something called a risk-limiting audit. This is a transparent and observable public process that confirms the reported outcome by having people inspect randomly selected paper ballots.
“Risk-limiting audits are a way to determine with high confidence that the results of an election are correct, and it takes much less time and effort than a complete recount,” Halderman said. “This is something that every state should do after every significant election and something that voters should demand from their election officials.”
Only a handful of states so far require risk-limiting audits. Colorado and Rhode Island require one before a vote is certified, and Nevada plans to do the same starting in 2022. Washington, Ohio and California allow election officials to select this approach from a set of post-election audit options. Alabama, Georgia, Indiana, Michigan, Missouri, New Jersey, Pennsylvania and Virginia have already launched or plan to launch pilots.
