text: In 2007, Estonia was an early victim of Russian cyberattacks; yet today nearly half of the country’s citizens vote online. Estonia has kept the Kremlin from corrupting that digital democracy in part by giving every citizen a smart ID card that physically authenticates their identity for online banking, paying taxes, and voting. Online elections remain science fiction in the US. But issuing Estonia-style authentication tokens—think YubiKeys—to American election officials and political campaigns could do a lot to protect them from targeted hacking.