Public security test of electronic voting machines in Brazil completes 30 years with no flaws found
Quick Look
- The Security Test for voting machines, open to citizens and experts since 2009, did not find any vulnerability capable of compromising the secrecy of the vote or the results of the elections.
- The system, which turns 30 years old in 2026, goes through verification stages such as digital signature, integrity testing and comparison with paper ballots, ensuring the reliability of the Brazilian electoral process.
AI-generated summary
Why It Matters
The public voter security test was created in 2009 by the TSE to allow experts and citizens to analyze the systems' source code in search of vulnerabilities. Since then, it has been part of the Electoral Court's verification mechanisms before, during and after elections.
One example is the so-called Security Test, an initiative that allows computer experts and any Brazilian citizen over 18 years of age to try to find vulnerabilities in the systems used in electronic voting machines.
One of the main targets of the tests is the source code of the ballot box's systems. It is the set of instructions that determines how the software should work. According to the TSE, since the first edition of the test, in 2009, no participant has managed to find a flaw capable of compromising the secrecy of the vote or the result of an election.
📍In a series of 50 videos, g1 will explain the main themes of the 2026 elections. The content shows how polls work, explains the role of the positions in dispute and the functioning of Congress, and provides practical guidance for voting. The series also addresses the impact of new technologies on the campaign, such as artificial intelligence, deepfakes and influencers.
The public security test is just one of the verification mechanisms used by the Electoral Court. Check out the main steps of the process:
A year before the election, the source codes of electoral systems are opened for analysis. Authorized entities can examine the codes, monitor the functioning of the systems and request clarifications from the TSE.
Closer to voting, the ballot boxes that will be used undergo a digital signature and sealing process. From that moment on, any changes to the programs can be identified.
On election day, some ballot boxes are drawn to pass the integrity test. The day before, representatives of entities and parties fill out paper ballots with votes and deposit them in a canvas ballot box. On voting day, the same votes are typed into the electronic ballot box drawn for the test — the entire process is monitored and filmed.
At the end, a comparison is made between the result recorded by the electronic voting machine and the votes filled in on paper ballots. This is how, in practice, it is verified whether the equipment correctly records and counts the votes.
Before voting begins, each ballot box issues the so-called "zerésima", a document that proves that the equipment started the day without any votes registered.
At the end of voting, the ballot box issues the ballot box, with the total votes received by each candidate and party, in addition to blank and invalid votes. A copy of the ballot is posted at the voting station, and the document contains a QR Code that can be read by anyone, allowing the results of that ballot box to be compared with the data published later by the TSE.
The electronic voting system is not new: the electronic ballot box turned 30 years old in 2026. Since its debut, 15 computerized elections have been held in Brazil — the one in October will be the sixteenth.
Open Questions
- How many participants have analyzed the source code to date?
- What are the criteria for an entity to be authorized to examine source codes?
- How often is the source code updated between elections?





