What Is Online Voting and How Does It Work?
Published 18 August 2026 · 7 min read · Explainer
In short
Online voting is a system for casting and counting votes through a website, app or embedded widget instead of on paper. Voters open a voting page, choose an entrant or option, and the platform records the vote against rules the organiser sets — such as one vote per person, per day, or per verified email address. Organisations use online voting for competitions, pageants, awards, events and audience-choice campaigns, where votes are tallied automatically and results can be shown on a live leaderboard.
Most people meet online voting the same way: a link arrives from a friend, a school, a club or a pageant contestant, and a tap decides who wins something. Behind that tap sits a set of decisions the organiser had to make — who may vote, how often, whether votes are free or paid for, and how the count can be trusted. This guide explains the mechanics plainly, and separates competition and audience voting from the very different world of government elections.
How does online voting work, step by step?
Almost every online vote follows the same five stages, whether it decides a pageant title or a staff award.
- 1Set up the ballot. The organiser creates the event, adds the entrants or options, and writes the rules — opening and closing times, how many votes each person gets, and whether voting is free, paid, or both.
- 2Publish the voting page. The vote goes live at a public web address, is embedded into an existing website, or is driven through an API into an app or on-site kiosk.
- 3Voters cast votes. Someone opens the page, picks an entrant and confirms. Depending on the rules, they may enter an email address or sign in first.
- 4The platform applies the rules. Before a vote is stored it is checked against the limits the organiser set — cooldown periods, daily caps, duplicate checks and whether voting is still open.
- 5Votes are counted and published. Totals update automatically. Organisers can show a live leaderboard, hide results until the close, or reveal them on stage.
The important part is stage four. A voting page is easy; the rules engine behind it is what separates a credible result from a popularity contest between whoever has the most patience.
What is online voting used for?
Outside of government elections, online voting is overwhelmingly used to decide winners and gather audience opinion. Common uses include:
- Pageants and title competitions, including People's Choice and fan-favourite categories
- Awards ceremonies where an audience-voted category sits alongside judged ones
- Talent competitions, battle-of-the-bands events and performance heats
- Sports club and season awards, such as players' player or club person of the year
- School competitions, art shows, science fairs and fundraising campaigns
- Festival and community campaigns — best stall, best float, community project of the year
- Employee and member recognition inside organisations
These share a shape: a fixed list of entrants, a public or semi-public audience, a deadline, and a result that has to look fair to people who lost. That is a different problem from electing a government, and it is worth being precise about the difference.
How is online voting different from voting in a government election?
They share a name and very little else. Government elections must guarantee a secret ballot, verify that each voter is an enrolled citizen, and produce a result that can be independently audited and legally challenged. In 2020 the United States Cybersecurity and Infrastructure Security Agency, together with the Election Assistance Commission, the FBI and NIST, assessed electronic ballot return as high-risk even with security controls in place, and recommended paper ballot return.
Competition and audience voting carries none of those constitutional requirements. Nobody is enrolled, the ballot is usually not secret, and the stakes are a sash, a trophy or a title rather than the composition of a parliament. That is why online voting is entirely normal for a pageant and still contested for a national election — and why security advice written for elections does not transfer cleanly to competitions.
| Government election | Competition / audience vote | |
|---|---|---|
| Who may vote | Enrolled citizens only, identity verified | Whoever the organiser invites — often the public |
| Ballot secrecy | Legally required | Usually not required |
| Typical controls | Electoral roll, in-person ID, paper audit trail | Email verification, per-day limits, rate limiting, duplicate detection |
| Audit expectation | Independent recount and legal challenge | Organiser can show vote logs and totals |
| Consequence of a flawed result | Constitutional | Reputational — and it is still serious for entrants |
What stops someone voting more than once?
Nothing stops it completely, and any platform claiming otherwise is overselling. What a good system does is make repeat voting expensive enough in effort that it stops changing the outcome. Controls usually stack in layers:
- Vote limits — one vote per person overall, one per day, or one per entrant per day, so enthusiasm is bounded
- Email verification — a vote is tied to a working email address, which raises the cost of manufacturing voters
- Account-based voting — voters sign in, giving the strongest identity signal and the highest drop-off
- Rate limiting and cooldowns — a short mandatory pause between votes from the same network connection
- Daily caps per network — an upper bound on how many votes one connection can contribute
- Audit logs — a stored record of every vote, so anomalies can be investigated after the close
The Voorna voting platform applies this layering directly: organisers set a free-vote limit for their event, and the platform enforces it — along with a short cooldown and a daily cap per network connection — before a vote is stored. Automated voting is a recognised web threat in its own right — OWASP catalogues it as OAT-016 "Skewing", defined as repeated automated requests intended to alter a metric such as poll results.
Is online voting secure?
For competitions and awards, yes — provided you match the controls to what is at stake. Security for an audience vote means three practical things: votes cannot be trivially automated, the count cannot be edited without a trace, and the organiser can explain how the result was produced.
The threat is real but ordinary. Imperva's 2025 Bad Bot Report found automated traffic accounted for 51% of all web traffic, overtaking human activity for the first time in a decade. A voting page on the open internet will meet automated traffic; the question is whether it is designed to absorb it. Deeper detail on the mechanics sits in how secure online voting works and in online voting security for organisers.
What does an online voting platform actually give you?
Compared with collecting votes in a spreadsheet, a form or a social media comment thread, a dedicated platform provides:
- A branded voting page with entrant photos and profiles, ready without development work
- Rule enforcement that runs before a vote is stored, not after
- Automatic counting and a live or hidden leaderboard
- Delivery options — a hosted page, an embed on your own site, or an API for a custom app
- Per-entrant share links, so contestants can campaign and organisers can see which traffic converted
- Paid voting through a payment provider, where the organiser wants voting to raise funds
- A stored vote record for after-the-fact review
Voorna provides all three delivery routes from one back end: a hosted voting page, an iframe or JavaScript embed for an existing website, and a REST API for custom apps and kiosks.
How do you know if online voting suits your competition?
Online voting fits well when the audience is dispersed, the entrant list is fixed, and the result is meant to reflect public enthusiasm. It fits badly when the decision genuinely requires expertise — judging technical merit, for example — in which case a judged score with an audience-voted category alongside it usually works better than either alone.
A short test: if you could not explain the voting rules to a disappointed entrant in three sentences, the design is too complicated. Start from the rules, then choose the tooling. The practical build sequence is covered in how to set up an online voting system, and the trade-off against paper in online voting vs paper voting.
Frequently asked questions
- Do voters need to create an account to vote online?
- Not necessarily. Account-based voting gives the strongest identity check but reduces turnout, because every extra step loses voters. Many organisers use open or email-verified voting for public campaigns and reserve account-based voting for member-only or high-stakes votes. On Voorna the organiser sets the free-vote limit per event, and the platform enforces it before a vote is recorded.
- Can people vote from another country?
- Yes, unless the organiser deliberately restricts it. Any public voting page is reachable worldwide, which matters for diaspora audiences and international competitions. If entrants have very different overseas followings, say so in the rules up front rather than adjusting after the fact.
- Can online votes be anonymous?
- Votes can be anonymous to the public while still being recorded against a technical identifier such as an email address or network address for anti-fraud purposes. Genuine end-to-end secret balloting is a specialist requirement for statutory elections and is not what competition voting platforms provide.
- How long should online voting stay open?
- Most competitions run between one and three weeks. Shorter windows concentrate attention and reduce the time available for organised manipulation; longer windows suit campaigns where entrants are actively fundraising or recruiting supporters. Always publish the exact closing time, including the time zone.
Sources
- Risk Management for Electronic Ballot Delivery, Marking, and Return — CISA, U.S. EAC, FBI and NIST. The assessment that electronic ballot return is high-risk for government elections, and the recommendation of paper ballot return.
- OAT-016 Skewing — OWASP Foundation. Automated repeated requests intended to alter metrics such as poll results being a catalogued web application threat.
- 2025 Bad Bot Report — Imperva (Thales). Automated traffic accounting for 51% of web traffic in the 2025 report period.
Planning a vote for a competition, award or event? See how Voorna handles the voting rules, counting and leaderboard for you.
Explore Voorna's voting features