Wikipedia:Administrator elections/December 2025/SecurePoll setup

Special:SecurePoll/create

IMPORTANT: Polls cannot be edited after the election starts, except the poll admins. Poll admins can no longer be edited after the election ends. Make sure everything in this section is programmed in perfectly before the poll start date.

• Poll Title = English Wikipedia administrator elections, December 2025
• Election start date = 2025-12-09 00:00:00 UTC
• Election end date = 2025-12-15 23:59:59 UTC
• Poll type = Range voting (histogram range)
• Encryption = OpenSSL
  • Open Windows PowerShell
  • cd to where you want to save your 4 encryption key files (cd "F:\Dropbox\Important Documents\Notes By Topic\Wikipedia\Election encryption keys\2025-12-09 enwiki election")
  • Type these 4 commands:

    • openssl genpkey -algorithm rsa -out encrypt-private.pem
      openssl pkey -in encrypt-private.pem -pubout -out encrypt-public.pem
      openssl genpkey -algorithm rsa -out sign-private.pem
      openssl pkey -in sign-private.pem -pubout -out sign-public.pem
      

  • Open these files in a text editor, and copy paste their values into the appropriate text box. Do not omit things like -----BEGIN PUBLIC KEY-----, that is required.
    • encrypt-public.pem should be copy pasted into the "Encryption key" text box
    • sign-private.pem should be copy pasted into the "Signing key" text box
  • Note: Explanation for why there's 4 keys and why we use public key A and private key B here:
• Admins = all election clerks, all backup election clerks, all scrutineers, all backup scrutineers
  • Novem Linguae, Robertsky, Giraffer, Risker, Zzuuzz, Dreamy Jazz, Barkeep49
• Shuffle options on the voting page = false
• Question text = December 2025 English Wikipedia Administrator Election candidates
• Minimum score = -1
• Maximum score = 1
• Default score = 0
• Use custom messages for column labels = true
• -1 = Oppose
• 0 = Abstain
• +1 = Support
• Note: candidates must be typed in alphabetically
  • Summary of text to add for this election (do one line at a time) (regex):

    • [[Wikipedia:Administrator elections/December 2025/Candidates/Bunnypranav|Bunnypranav]]
      [[Wikipedia:Administrator elections/December 2025/Candidates/Epicgenius|Epicgenius]]
      [[Wikipedia:Administrator elections/December 2025/Candidates/Left guide|Left guide]]
      [[Wikipedia:Administrator elections/December 2025/Candidates/LEvalyn|LEvalyn]]
      [[Wikipedia:Administrator elections/December 2025/Candidates/MPGuy2824|MPGuy2824]]
      [[Wikipedia:Administrator elections/December 2025/Candidates/The4lines|The4lines]]
      [[Wikipedia:Administrator elections/December 2025/Candidates/UtherSRG|UtherSRG]]
      [[Wikipedia:Administrator elections/December 2025/Candidates/Yue|Yue]]
      

  • Click "Add another option" and add all additional candidates in a style similar to the above line
• Reason = create
• Give the backup election clerk a copy of your 4 keys

Special:SecurePoll/translate

Note: It is hard to blank fields once you have added text to them. If you need to blank a field, until phab:T397575 is solved, simply replace all the text with one space character.

Note: diffs/logging/msgs for translate currently has a bug where it writes the old settings (phab:T411761). so careful relying on diffs to see what you edited, to make sure your voter eligibility edits went through, etc.

• Select English. Click Translate. This will load a page with a lot of text boxes to fill in.
• intro =

  • [[Wikipedia:Administrator elections/December 2025|Election main page]] • [[Wikipedia talk:Administrator elections|Report problems or issues]] • [[Wikipedia:Administrator elections/December 2025#What data does SecurePoll collect%3F|What data does SecurePoll collect?]]
    
    '''''Instructions'''''
    *'''Use the radio buttons.''' Please use the radio buttons below to indicate your preference for each candidate with "Oppose", "Abstain", or "Support". An "Abstain" vote does not affect the outcome in any way.
    *'''Vote in a single sitting.''' Voting must be done in a single sitting. 
    *'''You may change your vote by starting over.''' After your vote has been accepted, you may change your vote any time before the close of voting. To do so, reopen the voting interface and a fresh ballot page will be displayed. You will need to complete the voting process again from scratch. For this reason, consider keeping a private record of your vote. Your new ballot will override the old one.
    

• jump-text =
• return-text =
• unqualified-error =

  • For the reason(s) above, your account does not meet the requirements to vote in this election. If you believe you are receiving this message in error, please post on the [[Wikipedia talk:Administrator elections|election talk page]].
    

• comment-prompt =
• reason = add messages

Special:SecurePoll/votereligibility

Note: here is the official voter eligibility criteria: Wikipedia:Administrator elections/July 2025#Voter eligibility. Extendedconfirmed, not sitewide blocked, not a bot

Note: next election, now that phab:T397596 is solved, we can do...

• must not be sitewide blocked = true
• must not be flagged as a bot = true
• must be in any one of these groups = extendedconfirmed, sysop
• reason = create
• save

Note: next election, do a test election to double check the new settings above

• Basic options
  • minimum edits = 0
  • must not be sitewide blocked = true
  • must not be flagged as a bot = true
  • save
• now go back and edit it again
• eligibility list -> edit list ->
  • refresh this quarry query. takes 64 seconds: https://quarry.wmcloud.org/query/94828 (robertsky's copy: https://quarry.wmcloud.org/query/99585)
  • download the results as TSV (don't do CSV, Excel messes up the rows towards the end)
  • open the TSV file in your favorite text editor (e.g. Notepad++). make sure it's using UTF-8, not ANSI
  • delete the first row (user_name)
  • paste into the eligibility list
  • save the eligibility list
  • Note: takes about 40 seconds to save since it's a big list
  • now go view it and double check that it has around 78,325 usernames on it
    • Note: it did seem to delete around 25 usernames for some reason. not sure why. maybe it found some duplicates?
    • Note: it will append @enwiki to the end of everything. this is fine.
  • all done. don't save anything. everything is already saved.

Adding / deleting candidates before the election starts

• Adding - Shouldn't need to do any adding, since the call for candidates closed. If you did need to add someone, to do alphabetical order would be a pain. Would have to add an option with a placeholder ABC, then cut and paste a bunch of people around.
• Deleting - If someone withdraws... edit the poll, click "delete option", click save

During the election

• If someone is unable to vote but through investigation you determine they are qualified, you can add them to the override list:
  • votereligibility -> override list -> edit list -> type their name on a new line -> save list
• Note that scrutineers must be added as election admins (Special:SecurePoll/edit) before the end of the election. Ideally when you're creating the poll so you don't forget. After the election, the edit page becomes un-editable and scrutineers cannot be added.
• If someone wants to drop out during the election...
  • Go to the Translation page and edit their candidate name to have a strikethrough. <s>Name</s>
  • Later, when tallying, when you're copy pasting the results from the SecurePoll tally page to the wiki page, delete the row that has their data, keeping their election results un-published.

Post election

• Pause to let scrutineers look for votes to strike (see #Instructions for scrutineers below)
• Once scrutineers are done with their IP checking...
• Tally (and decrypt)
  • Open these files in a text editor, and copy paste their values into the appropriate text box:
    • encrypt-private.pem should be copy pasted into the "Decryption key" text box
    • sign-public.pem should be copy pasted into the "Verification key" text box
  • click "Create tally"
  • copy paste the tally into Microsoft Excel
    • delete the column "Average score"
    • add a column for Support / (Support + Oppose). formula is =D2/(D2+B2)
    • format Support / (Support + Oppose) as percent, with 2 decimal points.
    • add a column for "Result". anyone whose Support / (Support + Oppose) column is >=70%, and whose Support column is >= 20, is "Elected". anyone else is "Not elected". formula is =IF(AND(E2>=0.7,D2>=20),"Elected","Not elected").
    • recall candidates have a 55% support threshold, not 70%. modify the formula for any recall candidates
    • left align all
    • bold italic underline header row
    • in cell A1, type "Candidate"
    • sort by Support / (Support + Oppose), highest to lowest
    • change the column order for columns B, C, D to support, abstain, oppose
  • in a sandbox, copy paste from Microsoft Excel into the Visual Editor. Visual Editor will automatically format this as a table for you.
  • format the wikicode table
    • add sortable to make the columns sortable: {| class="wikitable sortable"
    • change all the cells in the first row to start with exclamation marks. this will format them, and make them sortable. example: !Candidate
    • highlight rows of elected editors green |- style="background: #cfc;"
    • wikilink usernames {{AdEResCandRw|Username goes here}}
    • change heading to Support /<br>(Support + Oppose)
    • sign
    • add a section for scrutineers to sign. use a level 4 heading
    • add the sentence "Results are preliminary until all 3 scrutineers sign."
• Post the tally/results onwiki (copy paste from your sandbox to the results page)
• Inform the scrutineers
• The scrutineers each sign off on the results onwiki (confirming that the tally was copy pasted from SecurePoll accurately by the election clerk) (see #Instructions for scrutineers below)
  • If any candidates withdrew during the election, when you're copy pasting the results from the SecurePoll tally page to the wiki page, delete the row that has their data, keeping their election results un-published.
• Once all 3 scrutineers have signed off, the election clerk posts at WP:BN asking for the bureaucrats to promote the newly elected candidates to administrator

Check votes

Look for inappropriate votes to strike.

• Special:SecurePoll -> English Wikipedia administrator elections, July 2025 -> List
• types of votes to look out for / strike
  • sockpuppets
  • accidental double votes involving 1 main and 1 alt account (if it was a good faith mistake, just strike 1 vote)
  • bots
  • vanished accounts (note: votes from users who vote before vanishing are still eligible (see also Arbcom election rules); usernames in the voting list do not get updated after a rename)
  • any other irregularities
• A script is available to supplement checks: https://checkuser.wikimedia.org/w/index.php?curid=12220
• if you find an irregularity but aren't sure if you should strike it, please ask the other scrutineers, or in the AELECT election officials Discord chat, or at WT:AELECT.
• all 3 scrutineers should make a pass through the list and investigate suspicious things and abnormalities
• sorting
  • one of the passes should sort the votes by IP address column (click on the table header to sort). this will group identical IP addresses together, which may reveal sockpuppets
  • one of the passes should sort the votes by username so you can look out for any obvious main account + alternate account pairs that voted
    • the system automatically discounts duplicate votes by the same user, by putting all but the most recent vote in gray and italics. so you don't need to worry about striking duplicate votes by the same user. focus on main account + alternate account pairs.
  • one of the passes should be to scrutinize more closely any row labeled with "dup cookies". SecurePoll sets a cookie when a voter first votes, and doesn't change this cookie even when logging out and back in with a different account. "Dup cookies" means the user voted, logged out and into a different account, then voted again. You can click on "Details" and scroll down to "Cookie duplicate users" to see their other accounts.
• be sure to check (sorting may also help you here):
  • 'CSRF' column. This may contain 'Failed'. See CSRF for background information.
  • 'Duplicate' column. This may contain 'Dup cookies' indicating there's another account. Click on the vote details link to find out more.
• optional: you can use checkuser tools such as Special:CheckUser or Special:Investigate to do more detailed investigations of abnormalities (keeping in mind CheckUser policies such as WP:NOTFISHING), or you can just use the data in SecurePoll. up to you
• please audit and keep an eye out for incorrect vote strikes. any election administrator can strike a vote at any time, including election clerks. pressing the "strike" button prompts the user to enter a reason. you can check who did the strike and the typed in reason by clicking on the vote.
• when all 3 have completed their pass, the election clerk (Novem Linguae) should be informed so that he can decrypt and tally. you can inform at WT:AELECT for transparency, or user talk, or offwiki. however you want.

Verify tally

Verify that the tally posted onwiki matches the tally in the SecurePoll software, and that all calculations are correct.

• after a slight delay to decrypt and tally, Novem will copy paste the tally results onwiki
• Special:SecurePoll -> English Wikipedia administrator elections, December 2025 -> Tallies -> row 1 (the newest one) -> click "View"
• this will display a tally (count of the totals of all the types of votes)
• confirm...
  • that the copy-pasted results onwiki match the tally in SecurePoll
  • that the math in the onwiki results for the column "Support / (Support + Oppose)" is correct
  • that the "Result" column is correct and follows the election criteria listed at Wikipedia:Administrator elections/December 2025#Tallying and results
• then sign off on the results on the results wiki page
• example results page with sign-offs from a previous election: Wikipedia:Administrator elections/July 2025/Results
• the tally instructions that the election clerk used are at Wikipedia:Administrator elections/December 2025/SecurePoll setup#Post election

Notes

• the scrutineering phase will start as soon as voting closes, which for this election is December 16, 0:00 UTC
  • AELECT1 scrutineering took 4 days. AELECT2 scrutineering took 2 days.
  • this is pretty good. WP:ACE often takes longer
  • there is no official deadline. take as long as you need to provide accurate scrutineering.
  • however, please also balance this with giving candidates a good experience by not taking unnecessarily long. waiting for the results, and not having an exact day and time we will post the results, can be stressful for candidates
• please let us know as soon as possible if you will be busy during scrutineering time. we have alternate checkusers who can step in and take people's places, if needed.
• it is impossible to add scrutineers once a poll officially ends. I will pre-program the main scrutineers and backup scrutineers.
• WMF only retains voter PII (such as IP addresses) until 60 days after the end of the poll. if for some reason scrutineering took a really long time, then it needs to be done within 60 days, or we lose the ability to check IP addresses.

Before the poll starts

Page	Enabled?
Special:SecurePoll/vote	N
Special:SecurePoll/translate (msgs)	Y yes, except blanking isn't allowed. phab:T397575
Special:SecurePoll/list (view voters, strike votes, scrutineer)	N
Special:SecurePoll/edit	Y
Special:SecurePoll/votereligibility	Y
Special:SecurePoll/dump	N
Special:SecurePoll/tally	N
Special:SecurePoll/logs	Y
Special:SecurePoll/archive	N

After the poll starts but before it ends

Page	Enabled?
Special:SecurePoll/vote	Y
Special:SecurePoll/translate (msgs)	Y yes, except blanking isn't allowed. phab:T397575
Special:SecurePoll/list (view voters, strike votes, scrutineer)	Y
Special:SecurePoll/edit	Y mostly no, except you can edit election admins and return-to URL
Special:SecurePoll/votereligibility	Y
Special:SecurePoll/dump	N
Special:SecurePoll/tally	N
Special:SecurePoll/logs	Y
Special:SecurePoll/archive	N

After the poll ends

Note that a poll can be re-tallied at any time. For example, maybe some socks are discovered after the first tally. Those votes can be striken, then the tally re-run.

Page	Enabled?
Special:SecurePoll/vote	Y
Special:SecurePoll/translate (msgs)	Y yes, except blanking isn't allowed. phab:T397575
Special:SecurePoll/list (view voters, strike votes, scrutineer)	Y
Special:SecurePoll/edit	N
Special:SecurePoll/votereligibility	N
Special:SecurePoll/dump	Y
Special:SecurePoll/tally	Y
Special:SecurePoll/logs	Y
Special:SecurePoll/archive	Y