INEC’s BVAS Still Runs on Android 10: What It Could Mean for Nigeria’s 2027 Election

Nigeria is moving closer to the 2027 general election, and one piece of technology will once again be at the centre of the voting process: the Bimodal Voter Accreditation System (BVAS). BVAS is used to authenticate voters through fingerprint and facial recognition and to electronically transmit polling-unit results to INEC's IReV platform. But there is now a technology question that Nigerian voters should understand: the BVAS devices currently run Android 10.

INEC's Director of ICT, Dr Lawrence Bayode, confirmed in August 2026 that the devices have continued to use Android 10 since they were procured in 2021. He also said INEC is not currently planning to upgrade the operating system, arguing that the existing system works and that INEC has added its own security measures.

That does not automatically mean BVAS is unsafe or incapable of conducting an election. But with a presidential election involving millions of voters and thousands of polling units, it raises legitimate questions about security, reliability, performance and long-term maintainability.

Why Android 10 matters

Android 10 was released in 2019 and is now several generations behind current Android releases. However, there is an important distinction between running an old Android version and running an unpatched device.

Google's Android security documentation shows that devices running Android 10 and later can still receive security updates or Google Play system updates where supported. Therefore, simply saying "BVAS uses Android 10" does not prove that every BVAS device is completely unprotected.

The more important question for INEC is:

What is the current security-patch level, firmware status and application security configuration of the actual BVAS fleet?

INEC says it has additional security controls around the BVAS system. That should reassure voters to some extent, but independent technical verification and transparent testing would provide considerably more confidence.

Could outdated software cause BVAS delays?

Potentially—but Android 10 itself should not automatically be blamed for every BVAS problem. A device can continue running a specific operating system reliably for years if the hardware, application and supporting infrastructure have been properly engineered.

The bigger concern is software and hardware ageing.

An election system has to cope with unusual conditions: large numbers of voters arriving within a short period, biometric authentication, local data processing, connectivity problems, battery limitations, application crashes and eventual transmission of election information. During the August 1, 2026 mock accreditation exercise in Osun State, some BVAS devices reportedly experienced failures, although INEC said the issues were resolved within about an hour.

That incident is not proof that Android 10 caused the problem. But it demonstrates why INEC needs to stress-test the complete system before 2027.

What happens when election traffic increases?

There is another misconception worth clearing up.

More voters do not necessarily mean Android 10 will become slower.

The operating system does not simply slow down because millions of Nigerians are voting at the same time. Much of the accreditation processing happens on individual BVAS devices. The potential bottleneck comes from the entire system surrounding the device.

For example, problems could occur if there are:

• overloaded backend services;

• poor mobile network coverage;

• server or database bottlenecks;

• application crashes;

• insufficient device storage;

• slow biometric processing;

• outdated libraries or APIs;

• authentication failures;

• inadequate power at polling units.

The result could be longer queues and delays in accreditation, even if the Android operating system itself is functioning normally.

Security is the bigger concern

Election devices process extremely sensitive information. BVAS handles voter authentication and election-result transmission, making cybersecurity particularly important. INEC's own election technology handbook describes BVAS as a system intended to strengthen electoral integrity and transparency.

An older operating system can become problematic when its underlying components no longer receive the same level of security maintenance available to newer platforms. That doesn't mean an attacker can simply "hack Android 10" and change an election. INEC has additional security controls, and BVAS is a specialised election system rather than an ordinary Android smartphone. The concern is instead about attack surface, vulnerability management and the ability to maintain the platform over several years.

What INEC should do before 2027

INEC does not necessarily have to throw away every BVAS device and purchase thousands of completely new machines. There are several practical options.

1. Establish a publicly verifiable security baseline
INEC should publish the Android security-patch level, firmware version and BVAS application version being used on election devices, while keeping sensitive security information confidential. This would allow cybersecurity experts to determine whether the devices are adequately maintained.

2. Consider a controlled operating-system upgrade
If the existing hardware supports a newer Android version, INEC could test an upgrade in a controlled environment. But upgrading immediately before an election can introduce its own risks. The better approach would be to establish a test fleet, run biometric and network stress tests, conduct security assessments and only deploy an upgrade after extensive validation.

3. Replace devices that cannot be adequately secured
If particular BVAS hardware cannot support a sufficiently maintained operating system or security architecture, those devices should be prioritised for replacement. A national election is not the place to maximise the lifespan of ageing hardware simply to reduce procurement costs.

4. Perform nationwide stress testing
INEC should simulate election-day conditions before the presidential election. That should include millions of authentication attempts, intermittent network connections, simultaneous result uploads, battery degradation, device crashes and server failures. The objective should be to discover the breaking point before voters arrive at polling units.

5. Build strong offline capability
Nigeria's inconsistent network coverage means BVAS should not depend entirely on continuous internet connectivity. Devices should be able to securely store necessary local information and queue transmissions when connectivity is temporarily unavailable.

6. Publish independent audit results

Perhaps the most important recommendation is transparency. INEC should allow credible independent cybersecurity and technology experts to conduct controlled assessments of BVAS and publish a meaningful summary of their findings. Voters do not need access to the system's secrets. They need evidence that the system has been tested.

Should Nigerian voters be worried?

Concern is reasonable; panic is not.

The fact that BVAS runs Android 10 does not prove that Nigeria's 2027 election technology will fail. INEC itself says the system is functioning and that additional security measures have been implemented. At the same time, voters are justified in asking whether a system originally procured in 2021 remains technically appropriate for one of Nigeria's most important elections several years later. INEC's own technology handbook recognises software updates, maintenance and troubleshooting as part of BVAS management. That makes continuous technical maintenance particularly important as the 2027 election approaches.

Final thoughts

BVAS has become an important part of Nigeria's election infrastructure. INEC says the technology has helped address voter impersonation and improve the authentication process. But technology must evolve.

For the 2027 presidential election, the question shouldn't simply be "Is Android 10 old?"

The better question is:

Is every BVAS device secure, patched, tested, reliable and capable of handling election-day conditions?

If the answer is yes, INEC should demonstrate that through independent testing and transparent technical evidence. If the answer is no, there is still time to upgrade, replace or redesign the affected components before millions of Nigerians depend on them.

For voters, this is not about choosing Android 10 or Android 16. It is about ensuring that the technology responsible for verifying their vote is secure, reliable and thoroughly tested before Election Day.