Skip to content
Avoidance of Doubt Begin a course

Casino · Explainer 13/13

What Does Provably Fair Mean? How a Player Can Check a Result

5 min

Worth rememberingA provably fair game publishes a locked-in fingerprint of each result before you bet, so you can check it afterwards. Here is how the seeds and hashes fit together and what the check does not cover.

Roulette, chips and casino

For adults 18+.

"Provably fair" describes a game that lets the player confirm, after a round, that the outcome was set before the bet was placed and was not altered once the stake was known. It does this with cryptography rather than trust: the site commits to a hidden value in advance, the player adds a value of their own, and the two are combined in a way anyone can recalculate. The idea grew up around crypto casinos and simple games such as dice, crash and plinko, though the same method can sit behind cards or slot-style games.

The problem it tries to solve

In an ordinary online game, the result comes from a random number generator running on the operator's servers. A player cannot see that process. Confidence comes from outside checks instead: a regulator's licence conditions and testing laboratories that examine the software before it goes live. Provably fair systems take a different route. They hand part of the checking to the player, so a single result can be examined on the spot rather than accepted on faith.

For the conventional approach, see how slot machines use RNGs, reels and RTP. Provably fair is best understood as an extra layer on top of that idea, not a replacement for it.

The three ingredients

Most provably fair schemes use the same building blocks, even if the labels differ between sites:

IngredientWho supplies itWhat it does
Server seedThe operatorA long random string kept secret until it is retired. Before play, only its hash is shown.
Client seedThe player (or the browser, which the player can usually edit)Mixes the player's own input into every result, so the operator cannot pre-select outcomes alone.
NonceA counterGoes up by one with each bet, so the same pair of seeds produces a fresh result every round.

Why the hash matters

A hash function turns any input into a fixed-length fingerprint. Two properties make it useful here. The same input always gives the same fingerprint, and it is not practical to work backwards from the fingerprint to the input or to find a different input with the same fingerprint. Publishing the hash of the server seed therefore locks the operator in: it cannot later swap the seed without the fingerprint no longer matching.

How a round plays out

  1. Commitment. Before any bet, the site shows the hashed server seed.
  2. Player input. The client seed is set — ideally changed by the player to something of their own choosing.
  3. The bet. The game combines server seed, client seed and nonce, usually through a keyed hash function, and converts part of the output into a result: a dice number, a crash multiplier, a card position.
  4. Reveal. When the player rotates to a new server seed, the old one is disclosed in plain text.
  5. Verification. The player hashes the revealed seed to confirm it matches the commitment, then re-runs the published formula with the seeds and nonces to reproduce each past result.

Many sites offer a built-in verifier. That is convenient, but a checker hosted by the same operator proves less than one the player runs independently. Because the formula is public, any open-source tool or a short script can do the same job.

What a successful check proves

  • The result for that round was determined by values fixed before the bet.
  • The operator did not change its seed after seeing the stake or the player's input.
  • The conversion from hash to outcome followed the formula the site published.

What it does not prove

This is the part that is easy to skip. A verified round says nothing about whether the game is a good deal. The formula itself sets the house edge, and a perfectly verifiable dice game can still be designed to return well under what a player stakes over time. Reading that formula — or the stated return — matters as much as checking the hash. The numbers side of this is laid out in the guide to what published casino payout reports show.

A provably fair badge also says nothing about who runs the site, whether withdrawals are paid, how disputes are handled or whether the operator answers to any regulator. Those questions sit with licensing, and many provably fair sites operate outside regulated markets. The register checks in what a gambling licence is and how to confirm one still apply.

A few other gaps are worth knowing:

  • If the player never changes the client seed, the operator supplied every input, which weakens the protection.
  • The method shows that a result was not edited; it cannot show that the published formula is the one a game's interface actually displays, unless the player also checks that the shown outcome matches the computed one.
  • Verification happens after the fact. It can expose a problem, but it does not refund a loss.

Provably fair and the long history of trust in slots

Gambling machines have always asked players to trust a box they cannot see inside. Mechanical reels could at least be watched; electronic ones moved the decision into software, and with that came testing and licensing as the main safeguards. The story of that shift is told in how slots moved from one-armed bandits to digital spins. Provably fair methods are one more answer to the same old question — and, like the others, they cover only part of it.

Quick answers

Do I need to know cryptography to verify a result?

No. The usual steps are copying the seeds and nonce into a verifier and comparing the outcome. Understanding why it works helps, but it is not required to run the check.

Is a provably fair game better for the player?

Only in the narrow sense that individual results can be checked. The expected cost of play depends on the game's edge, which is a separate matter.

Can I use it to predict the next result?

No. The server seed stays hidden until it is retired, and the hash gives nothing usable about it in advance.

Gambling is a paid pastime for adults, not a way to earn. Rules on online play — crypto sites included — differ from place to place, so check what local law allows before you deposit anywhere.