Why ballot secrecy matters
The secret ballot exists for a reason: when people fear their vote can be seen, they can be pressured, bribed or punished for it. Genuine anonymity is what lets people vote according to their conscience, especially in contested or sensitive decisions.
Anonymity vs pseudonymity
Many systems are only pseudonymous: votes are stored under an identifier that can, in principle, be linked back to a person. True anonymity means that link is broken in a way that cannot be reversed, even by the system's administrators.
How zero-knowledge cryptography helps
Zero-knowledge proofs let the system confirm something is true - for example, that a voter is eligible and has not already voted - without revealing the underlying identity. This is how a system can enforce one person, one vote and still keep the ballot anonymous.
The voter proves they have the right to vote; the system verifies that proof; and the ballot is recorded with no identity attached.
Anonymity without losing verifiability
The common fear is that secrecy makes a result impossible to check. With modern cryptography the opposite is true: ballots can be anonymous and the total can still be publicly verified. You get both privacy and proof.