One-time password verification
Phone OTP, email OTP or both. Codes are hashed before storage, the login screen gives the same neutral response whether an account exists or not, and a registrar can issue a temporary credential in person.
Security decides whether a result can be defended. One-time password verification with an expiry and a single use, credentials that are never stored in plain text, and controls that run on the server rather than on the voter's screen.
Phone OTP, email OTP or both. Codes are hashed before storage, the login screen gives the same neutral response whether an account exists or not, and a registrar can issue a temporary credential in person.
Every password, including admin credentials and temporary ICT desk passwords, is hashed before storage. Nothing is kept in plain text, one-time codes included.
Voter, admin and platform logins each run behind their own rate limiter. Repeated failures lock the account before code guessing gets far.
Vote submission runs inside a database transaction, a hard per-device limit stops one phone voting for several members, and election status is computed from declared dates rather than a switch someone can flip.
Logging out invalidates the session token on the server immediately. A stolen token cannot be replayed after the member has signed out.
Every login, vote and administrative action is recorded with real device and browser detail and a server timestamp, and exports to CSV at any time for your committee, board or auditors.
A recount re-checks the count. An audit trail proves the process.
Disputes are settled from the record, not from a recount. The records themselves are covered on the audit trail page.We walk your committee through the platform with a sample election using your branch structure, then configure your branded instance and member register.
Phone: 0729 710 859 / 0719 764 485 Email: [email protected] Web: www.easypoll.co.ke