iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Black box voting describes a voting process whose recording or counting cannot be independently checked by voters or observers. The phrase is used especially for paperless electronic voting and for online voting that gives voters no way to verify how their ballots were recorded, collected, and tallied. It describes a verification gap; it does not, by itself, prove that votes were changed or an election manipulated.
What does “black box voting” mean?
The term is about what voters and observers can verify, not simply whether a system uses computers. A system is “black box” in the relevant sense when its internal recording or counting process is opaque and the people outside it lack enough evidence to check that votes were handled as intended.
In U.S. election-technology discussions, the phrase is often applied to direct-recording electronic (DRE) machines that do not produce a voter-verifiable paper audit trail. The National Democratic Institute (NDI) says such systems do not provide sufficient means for voters and stakeholders to verify that votes were accurately recorded. NDI’s guide to electronic voting and counting technologies explains this use.
Free tools Windows power users keep installed
One-click scans. No signup required.
For online voting, the term can refer to a different, more specific problem: voters have no functionality for checking whether their vote was cast as intended, collected as cast, and tallied as collected. A 2022 paper by M. Kirsten and coauthors defines a black-box system in those terms for its analysis of online voting. The two uses share a concern about verifiable evidence, but they are not interchangeable.
#1 Best Overall
Which voting systems are more or less verifiable?
The key questions are whether a durable record exists, whether it can be checked against the reported electronic result, and whether a recount or audit can use it. A paper record can support verification, but its existence alone does not mean that anyone inspected it or compared it with the tally.
| System | What the record can support | Limit or trade-off |
|---|---|---|
| DRE without a voter-verifiable paper audit trail | No voter-verifiable paper trail is available to audit or recount; NDI says voters and stakeholders lack sufficient means to verify accurate recording. | The electronic record cannot be independently checked against a voter-verifiable paper record. |
| DRE with a voter-verifiable paper audit trail (VVPAT) | The paper record may support an audit or meaningful recount. | NDI notes that adding a paper trail increases complexity, which can make reliability, staff training, and long-term sustainability harder. |
| Electronic ballot printer | A printer produces a paper record or token for the voter to deposit in a ballot box; the record may be checked or recounted. | Separate printing and counting equipment can increase cost and demands on IT capacity and long-term support. |
| Optical mark recognition (OMR) | The voter marks a paper ballot and a scanner tallies it; the physical ballot can provide a recount record. | Ballot design, ink, paper thickness, and other physical details can affect scanning accuracy. |
| Online voting without voter verification | Without built-in checks, voters may not be able to verify recording, collection, or tallying. End-to-end verifiability is the framework used to assess those steps. | Voters must trust the service, their device, and the server infrastructure; online voting also raises security, secrecy, and recount concerns. |
NDI’s descriptions of electronic ballot printers and optical-mark systems are in its technology guide. For the online-voting definition and verification framework, see Kirsten and coauthors’ 2022 paper, “Why is Online Voting Still Largely a Black Box?”
Rank #2
What does end-to-end verifiability check?
For online systems, end-to-end verifiability asks whether voters can check the steps between their choices and the reported result. In the 2022 paper’s framework, those checks include:
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →- Cast as intended: the recorded vote reflects the choices the voter meant to make.
- Collected as cast: the vote included in the collection matches the recorded vote.
- Tallied as collected: the final tally reflects the collected votes.
- Eligible-voter list: the list can be checked for ballots added beyond those cast by eligible voters.
These are verification goals, not a guarantee that a particular online system meets them. If voters cannot perform relevant checks, they must rely more heavily on the voting service and the devices and servers that operate it.
Does a paper ballot make electronic voting verifiable?
A paper ballot or voter-verifiable paper trail can provide evidence for a recount or audit, but three separate conditions matter:
- A record exists. The system produces a durable paper record that represents the voter’s choices.
- The record can be inspected. The election process makes the paper available for an appropriate recount or audit.
- The record is actually compared. An audit or recount checks the paper against the electronic result.
A paper trail enables checking; it does not establish that checking occurred or that an audit found no discrepancy. Conversely, the presence of software or electronic counting alone does not make a system a black box: the relevant distinction is what independent evidence and verification the process provides.
Rank #4
Do certification and testing eliminate the concern?
No. Testing and certification can be safeguards, but they do not by themselves show that voters can observe how votes were recorded or that a particular tally was independently verified. A historical Congressional Research Service analysis, “Election Reform and Electronic Voting Systems (DREs): Analysis of Security Issues,” discusses the role of laboratory testing and concerns that standards and procedural controls do not alone eliminate security and transparency issues. It also describes calls for more realistic testing with voters and for retesting after field use. That report is historical, so it should not be read as a description of current certification rules or the certification status of any particular machine.
Quick Recap
What the term does—and does not—show
- It does show: a concern about whether voters or observers have enough evidence to verify recording or counting.
- It does not show: that votes were altered, that a system failed, or that an election was manipulated.
- It does not automatically apply to: every computerized or electronic voting system. Paper records and other verification features can change what independent checks are possible.
- It does not establish current local conditions: the term alone says nothing about the equipment, law, audit procedures, or certification status in a particular jurisdiction.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
