Provably Fair Explained: How to Verify Server & Client Seeds
- What "Provably Fair" Actually Means
- The Three Ingredients: Server Seed, Client Seed, Nonce
- Why the Server Seed Is Only Revealed After Rotation
- Verifying a Round, Step by Step
- Which Games Are Actually Provably Fair
- What Provably Fair Doesn't Protect You From
- What Provably Fair Actually Proves, Claim by Claim
- What You Can Cross-Check Yourself Beyond the Seed Math
What "Provably Fair" Actually Means
At a regular online casino, you trust that the random number generator is fair because an auditor said so. At a provably fair game, you don't have to trust anyone: the casino commits to its randomness before you bet, and hands you the tools to check the math after. If the operator tried to rig a single round, the numbers wouldn't add up — and you'd be able to prove it.
The trick is a cryptographic commitment. Before your session starts, the casino generates a secret server seed and shows you its SHA-256 hash. A hash works one way only: the casino can't find a different seed that produces the same hash, so the moment that hash is displayed, the server's randomness is locked in. It can't be changed retroactively no matter what you go on to win or lose.
The Three Ingredients: Server Seed, Client Seed, Nonce
Every provably fair outcome is cooked from exactly three values, and understanding what each one does is the whole game:
Server seed — the casino's secret random string. You see only its hash while you play; the seed itself is revealed after you rotate to a new one.- Client seed — your contribution. Because the outcome is computed from both seeds together, the casino can't precompute results: it doesn't know what client seed you'll use. Always edit it to something of your own choosing rather than accepting the default.
- Nonce — a counter that starts at 0 and increases by one with every bet. It lets one seed pair produce thousands of distinct outcomes, and it stops the casino from cherry-picking: round 57 must use nonce 57, no exceptions.
The outcome of any round is a deterministic function — typically HMAC-SHA256 — of these three values. Same inputs, same result, every time, on any computer. That determinism is what makes independent verification possible.
Why the Server Seed Is Only Revealed After Rotation
A common beginner question: if the system is fair, why won't the casino just show me the server seed now? Because if you knew the active server seed, you could compute upcoming results and bet only on winners. The seed must stay secret while it's in use — that's not evasion, it's the design.
The reveal happens at rotation. When you click "rotate seed" (or the pair expires), the old server seed is retired and displayed in plain text, and a new hash is committed for the next session. Verification is therefore always retrospective: you check rounds played on the previous seed. Which leads to the one rule that separates verifiable play from theatre: if a casino never reveals retired server seeds, its "provably fair" badge is decoration. We've caught sites displaying a hash with no rotation button and no reveal — that's a commitment nobody can ever check, and it fails our audit instantly.
Verifying a Round, Step by Step
Here's the full loop as we run it when auditing casinos for our vetted casino ranking. It takes about five minutes the first time:
- 1. Record the hash before playing. Open the fairness panel, copy the hashed server seed, and set your own client seed. Screenshot both.
- 2. Play your rounds. Note the nonce and result of any bet you want to check later — most sites keep this in bet history for you.
- 3. Rotate the seed. The old server seed is revealed in plain text. Copy it.
- 4. Check the commitment. Run the revealed seed through any SHA-256 tool. The output must match the hash from step 1 exactly — one different character means the casino swapped seeds mid-session.
- 5. Recompute the outcome. Feed server seed, client seed and nonce into the game's published algorithm — every serious casino documents it and links an open-source calculator, and third-party verifiers exist for the popular originals. The recomputed result must equal what you saw on screen.
If steps 4 and 5 both pass across a sample of rounds, those rounds were mathematically fair. You don't need to check every bet — the casino can't know in advance which rounds you'll verify, so cheating on any of them is a detection risk it can't control.
Which Games Are Actually Provably Fair
This is where marketing gets ahead of reality. Provably fair applies to originals — games the casino built in-house, where outcomes come straight from the seed math: Dice, Crash, Plinko, Mines, Limbo, Keno, Wheel and their cousins. On these, the full verification loop above works end to end.
Provider slots are a different animal. Pragmatic Play, Hacksaw or NetEnt titles run on the provider's RNG servers, and the casino simply displays the result — there is no seed pair for you to verify, regardless of what badge sits in the lobby. Fairness there rests on the provider's lab certifications (GLI, eCOGRA, iTech Labs), which is a real but trust-based guarantee. So a site advertising "5,000 provably fair games" almost certainly has a few dozen provably fair originals and 5,000 certified slots. We flag exactly which titles at each casino support seed verification in the games guide, alongside house edge figures for the major originals.
What Provably Fair Doesn't Protect You From
Verified randomness is not the same as a good deal, and it's worth being blunt about the boundaries. Provably fair does not mean the odds favour you — a Crash game with a 4% house edge can be perfectly fair and still twice as expensive as a competitor's 1%. It does not protect your balance: an operator can run flawless seed math and still stall withdrawals, void wins on bonus technicalities, or vanish with the wallet. And it doesn't extend to sports odds, bonus terms or payout speed.
Treat provably fair as one line in the audit, not the whole audit. A trustworthy casino combines verifiable originals with a real licence, tested cash-outs and sane terms — and if it also skips paperwork, you'll find it in our no-KYC rankings. Fair math plus fast payouts is the standard; either one alone is half a casino.
What Provably Fair Actually Proves, Claim by Claim
The verification loop earlier in this guide proves one specific thing extremely well and says nothing at all about several others players routinely fold into "it's provably fair, so it's safe." Laid out claim by claim, the gap between what the math covers and what a casino's reputation has to cover instead becomes obvious.
| Claim | Provably fair proves it? | What actually backs it |
|---|---|---|
| This round's result wasn't changed after you bet | Yes | The SHA-256 commit-reveal itself — the hash, locked before play |
| The stated RTP matches the real long-run RTP | No | Independent lab testing over large sample sizes (GLI, eCOGRA, iTech Labs) |
| The casino will actually pay a win | No | Licence terms, banking track record, operator reputation |
| Your balance won't be frozen or a win voided | No | Bonus and AML terms, and how strictly the operator enforces them |
| The game is legally available in your province | No | Provincial registration status, not the fairness algorithm |
| The generator isn't skewed across thousands of rounds | Not directly | Statistical lab audits over large samples, a separate question from any single round |
Source: server seed, client seed and nonce scheme as documented in provably fair game providers' public documentation, September 2026.
The last two rows are the ones most guides skip, and they're worth separating carefully. A per-round proof, by construction, only ever answers a question about that one round: was the outcome computed from the committed seed, honestly, with no swap. It cannot, on its own, answer a distributional question like "does this game actually pay out 97% over a million spins" — that's a statistical claim about a long run, and confirming it requires a lab sampling thousands of outcomes and running the numbers, which is exactly what certification bodies do and exactly what a player checking one seed pair cannot replicate at home.
The province row is the most concrete of the six, and the easiest to check independently of anything the casino says about itself. Whether a specific operator can legally offer a game to an Ontario player has nothing to do with server seeds — it depends on whether that operator holds an active registration with iGaming Ontario's regulated market, a status you can confirm without touching a single hash. A perfectly fair Crash game running seed-verified rounds all day is still, from a legal-access standpoint, a completely separate question from whether Ontario players should be there at all — the methodology behind how we weigh that gap in a casino's overall score is covered on our how we rate page.
What You Can Cross-Check Yourself Beyond the Seed Math
Seed verification is the single most checkable claim in this whole guide, but it's also the narrowest — it covers one round at a time and nothing about the operator around it. Zoom out to the rest of what a casino publishes, and the picture of what a player can actually cross-check for themselves gets a lot bigger, and noticeably patchier.
| What you can cross-check yourself | Casinos (of 50) | Where to verify it |
|---|---|---|
| Game provider list | 48 | Lobby footer or provider filter, cross-checked against the studio's own site |
| Total game count | 46 | Lobby counter, spot-checked against the provider list |
| Year the brand launched | 44 | About page, cross-checked against licence registration date where published |
| Wagering multiplier on bonuses | 37 | Bonus terms page |
| Wagering time window | 10 | Bonus terms page, usually buried below the multiplier itself |
| Coins accepted at cashier | 46 | Deposit page, before creating an account |
Source: our database, 50 casinos, September 2026.
The pattern across these six rows runs opposite to what a player might expect: the numbers a casino most wants to advertise — provider list, game count — are published almost everywhere, while the term that most directly determines whether a bonus is actually claimable, the wagering time window, appears on only 10 of the 50 sites. A 35x multiplier means very different things depending on whether the window to clear it is 3 days or 30, and two-thirds of the catalog gives a player no way to check that second number before opting in.
None of these six rows touch fairness math at all — they're closer to consumer-disclosure questions than cryptographic ones, which is exactly why they belong next to the claims table above rather than inside it. A game can pass every seed check available and still sit at an operator that won't say how long you have to clear a bonus, and the reverse holds too: an operator that discloses everything on this list can still run games, like Crash or Dice originals, where the seed math is the one part of the experience you never have to take on trust. Checking both lists before depositing — what the operator discloses, and what the game itself lets you verify — covers more ground than either one alone.
Keep exploring
- Best Crypto & Bitcoin Casinos in Canada — our full top-10 ranking.
- Crypto casino games guide — which originals support seed verification, plus house edges compared.
- Our Canadian crypto casino ranking — licence checks and published terms behind every position.
- Best no-KYC crypto casinos — verifiable games without the paperwork.