As Johor heads to the polls, Estonia is already voting from the sofa

 While 2.7 million Johoreans queue with purple ink this Saturday, Estonians have voted online from home for two decades. Is it time we did the same?

It is a Saturday in 2040. Aisyah, a Johorean nurse on a night shift in Singapore, has ninety seconds before her break ends.

She opens an app, glances at her phone so it can match her face to her national digital ID, and taps her choice for the state seat back home in Senai.

The moment she confirms, her ballot is sealed with encryption so strong the server counting it cannot read whom she chose. She pockets a tracking code, and later checks it against a public ledger to see her vote in the verified tally, untraceable to her.

No queue. No ink. No plane ticket home.

That voting system does not exist in Malaysia yet. But it may be just a matter of time.

When more than 2.7 million Johoreans vote this Saturday, 11 July, most will queue at a table, dip a finger in purple ink and mark paper with a pencil, then wait for a hand count deep into the night. It is a ritual their grandparents would recognise, and its slowness is part of its safety.

For a glimpse of another path, look to a country that took a radically different route.

Estonia has let citizens vote online since 2005, the first nation to do so. The system rests on the one thing Malaysia is only now building: a compulsory national identity card with a chip. Voting happens from any home computer.

The voter plugs their ID card into a small reader clipped to their laptop, or skips the card and authenticates with their phone, then picks a candidate in an app that encrypts the choice and signs it with a legally binding digital signature.

To blunt any pressure from a boss or spouse, they can vote again as often as they like, with only the last vote counting, or cancel it altogether by marking a paper ballot on polling day.

It has worked. In 2023, 51% of all votes were cast online, up from under 2% in 2005.

That does not mean it has been bulletproof. In 2014, an expert team led by University of Michigan professor Alex Halderman studied the system and urged Estonia to switch it off at once, citing “major” security risks.

Three years later, a flaw in the chips of its ID cards surfaced just weeks before an election. And in January 2026, a group of 21 leading computer scientists declared internet voting “insecure and should not be used in public elections”.

So is online voting simply too dangerous to trust? Estonia’s response is the telling part. It did not quit. It debugged the system.

After 2014, prodded by observers, it let every voter check on a second device that their ballot was recorded, and by 2017 let anyone verify the entire tally. When the card flaw struck, it used a remote-update system it had already built to patch the cards over the internet, and the election went ahead with record turnout and no evidence of fraud.

Two decades on, no Estonian result has ever been shown to have been rigged.

And India, the world’s largest democracy, votes on machines yet prints a paper slip for every ballot, so a human count can always check the computer.

Built properly, a digital vote can be more auditable than paper, not less. With tools like Microsoft’s open-source ElectionGuard, every voter gets a code to trace their ballot, and if even 1% of them check, altering more than 100 votes in 100 million becomes almost impossible to hide.

Paper cannot let you verify your own vote from your sofa. Good cryptography can.

In Malaysia, we cannot overhaul the whole system overnight, but intermediate technologies can come first. An interference-proof election of the future isn’t a single slick app but a stack of safeguards, each covering the last one’s blind spot.

The first brick is already being laid. MyDigital ID, the government’s national digital identity, has signed up 8.7 million people, targets 15 million by the end of 2026 and aims to cover 95% of public services by 2030.

On that spine, add biometric check-in to shut out phantom voters. Keep a voter-verified paper slip for every ballot, as India does, as the tamper-proof backbone. Build end-to-end verification in from day one.

Confirm the result with risk-limiting audits, a statistical sample that catches a wrong count with mathematical confidence.

And start small, with Malaysians abroad – exactly where Estonia began.

Layer it that way and fraud will run out of room: a phantom voter is stopped at the door, a hacked server is caught by the paper, a rigged tally is exposed by the audit. And every citizen can check their own ballot.

However, two major problems still need solving. Reach is one: only 24% of rural households had fixed broadband in 2023 against 54% in the cities, so an online ballot must sit beside the booth, not replace it.

The other is the device itself: malware could alter a vote before it is even encrypted, and that remains the field’s hardest problem.

But these are challenges to engineer around, not reasons to stand still, as Estonia has shown.

This Saturday, another generation of Johoreans will walk out with a purple stain on their finger. For now, it is the safest receipt we have.

The task is to build one just as hard to forge and far easier to cast, and thankfully the tools are already on the table. - FMT

The writer can be contacted at kathirgugan@protonmail.com.

The views expressed are those of the writer and do not necessarily reflect those of MMKtT.