An online election system (10) has a database of registered voters (16). A voter accessing the election system (10) through a host server (12) and user interface (13, 14) verifies themselves by providing security information such as a unique identifier and password. The voter is then presented with a list of candidates and is prompted to indicate their vote which is then submitted to the server (12). Confidentiality of a vote is ensured because all voter identification is removed from the vote when the vote is received at the host server (12) and before the vote is stored and tallied. The privacy of the vote is further enhanced by encrypting communications between the host server (12) and the user interface (13, 14).