Estonia publishes source code of its national online voting system on GitHub

What happened

Estonia has published the source code of its national online voting system in a public GitHub repository, opening up the software behind its legally binding internet voting for anyone to inspect. The repository, hosted under the "valimised" organisation and named after the IVXV voting system, drew wider attention after reaching the front page of Hacker News.

According to the repository's description, the purpose of the publication is straightforward: to let the public review the code that runs Estonian online voting.

A publication channel, not a development hub

The description makes clear that this is not a conventional open-source project. The repository is not where the system is actively developed. Instead, the maintainers say it will be kept current, and that the code published there is the code actually used for elections.

That distinction matters. Community patches and pull requests are not how this software evolves; the repository functions as a regularly refreshed mirror of production code. For outside reviewers, that is both the appeal and the limitation of the arrangement. Anyone can audit the election software, but nobody outside the official process can change it.

Electoral oversight and legal constraints

The repository also spells out the governance around the code. Because a voting system used for legally binding elections must strictly follow Estonian law, the actual development of the i-voting system, together with a separate i-vote verification application, is supervised by the State Electoral Office of Estonia. Anyone looking for official background is directed to the electoral office's own website.

Rare territory for election software

Election authorities rarely publish the code that collects and counts votes. Systems of this kind are usually kept with vendors or government agencies, leaving researchers and observers to rely on certification reports and limited audits. Against that backdrop, a national election body posting its internet voting code for unrestricted reading is an unusual commitment to transparency.

Why it matters

Open code gives independent security researchers the chance to study a nationally used voting system for weaknesses, and it gives citizens and political parties something concrete to examine rather than vendor assurances alone. For a country that runs legally binding elections online, that scrutiny is a meaningful part of building trust in the result.

The limits are equally real. Reading the code does not by itself prove that the servers on election day executed exactly that code, nor that every step between the repository and the ballot box was untampered. Source publication complements, rather than replaces, the audits and operational controls around an election.

Even with those caveats, the repository sets a notable precedent: a state electoral authority effectively declaring that the software running its internet voting is the same software the public can read. For other democracies debating online voting, Estonia offers a working reference for how much of an election system can be opened up.