Provably Fair, Explained: Verify a Casino Roll Yourself

The short answer

Provably fair is a system that lets you verify a casino result yourself. Before you bet, the casino locks in its random number by publishing a hash, a kind of cryptographic fingerprint. After the bet, it reveals the number behind that fingerprint. If everything matches, you know the casino never touched the result. No trust required.

That's the whole pitch in one paragraph. The rest of this guide unpacks how the lock works, what the moving parts are called, and how to actually check a dice roll with your own hands. It takes about two minutes once you've done it once.

What does "provably fair" actually mean?

Provably fair is a commitment scheme, a cryptography term for an old, simple idea: I write my prediction down, seal it in an envelope, and hand you the envelope before anything happens. Later, you open it. I can't swap the paper inside, because you've been holding it the whole time. Cryptographers call this pattern commit-reveal: publish the fingerprint first, disclose the secret second.

Online, the "sealed envelope" is a hash. A hash function takes any piece of data and turns it into a fixed-length string of letters and numbers, its fingerprint. The same input always produces the same fingerprint. Change even one character of the input and the fingerprint changes completely. And crucially, you can't work backwards from the fingerprint to the original data.

The industry standard here is SHA-256, one of the hash algorithms specified in NIST's FIPS 180-4, the US federal hash standard last updated in August 2015. Feed it three characters or three gigabytes and the output is always the same size: 256 bits, written as 64 hexadecimal characters. That fixed format is why any SHA-256 tool on the internet can check a casino's commitment.

So the casino generates its secret random value, hashes it, and shows you the hash before you bet. It has now committed. Whatever happens next, the hash locks that secret in place.

Server seed, client seed, nonce: the three ingredients

Every provably fair game cooks its results from three ingredients. The names sound technical, but each one is just a string of characters with a specific job.

• Server seed. The casino's secret random value. This is the thing the casino hashes and shows you in advance. It stays hidden while you play, and the casino reveals it once you retire it.
• Client seed. Your contribution. It's a value tied to your session, and at most provably fair casinos you can edit it yourself before betting. Type in your dog's name if you like.
• Nonce. A counter that starts at zero and goes up by one with each bet. Bet number one uses nonce 1, bet number two uses nonce 2, and so on.

To produce a result, the game combines all three, hashes the combination, and converts part of that hash into a number. For a dice game, that might be a roll between 0 and 99.99. Same three inputs, same roll, every single time. There's no hidden fourth ingredient the casino can season to taste.

Why does your client seed matter so much? Because the casino picks its server seed before it knows what your client seed will be. It can't pre-cook a seed that produces losing rolls against your input, since your input doesn't exist yet.

Why can't the casino change the result after your bet?

Because of that hash you saw up front. Suppose you make a big bet and the honest math says you won. A crooked casino would love to quietly swap in a different server seed, one that makes you lose. Here's why it can't.

You're holding the fingerprint of the original seed. If the casino swaps seeds, the new seed hashes to a completely different fingerprint. The moment you check, the mismatch is obvious. There's no way to craft a fake seed that both changes your result and matches the committed hash. Finding one would mean breaking the hash function itself, which is the same math that secures most of the internet.

The nonce closes the other loophole. The calculation bakes in each bet number, so the casino can't reuse a favorable result or skip an unfavorable one without breaking the sequence. Every roll in your session sits pinned to its place in line.

How do you verify a dice roll yourself?

Time to get your hands dirty. Here's the full loop for one dice bet, using the tools any provably fair casino gives you in its fairness or settings menu.

1. Before betting, copy the hashed server seed. The casino displays it in advance. Paste it somewhere safe, like a note on your phone. This is your sealed envelope.
2. Set or note your client seed. If the site lets you edit it, change it to something of your own. Now you know the casino couldn't have predicted it.
3. Place your bet and record the result. Say the game shows a roll of 42.17. Note the nonce for that bet too.
4. Rotate the seed. In the fairness menu, request a new server seed. This forces the casino to reveal the old one in plain text, since it's now retired.
5. Hash the revealed seed. Paste it into any SHA-256 tool, or the site's built-in verifier, and compare the output to the hash you saved in step 1. Match? The commitment held.
6. Recompute the roll. Feed the revealed server seed, your client seed, and the nonce into the game's published formula, either by hand or with an open-source verifier. It should spit out 42.17. If it does, the casino locked that roll in before you ever clicked bet.

Some casinos make this easier by building the verifier directly into the game window, so you never leave the page. Wild.io, per its own published documentation, is one of the operators that exposes hash-based server-seed verification in its game interfaces. Third-party verifiers exist too, and using one keeps the casino out of the checking process entirely.

In our experience, most players run this check once, on a small bet, and never bother again. That's fine. The point isn't auditing every roll, it's that the casino can never know which bet you'll choose to check.

How is this different from a certified RNG audit?

People often treat "provably fair" and "certified RNG" as the same thing. They're not, and the difference is about who does the trusting.

A certified RNG audit means an independent testing lab, such as iTech Labs, GLI, or eCOGRA, examines the casino's random number generator and confirms its output is statistically random. That's genuinely valuable. But you're trusting the lab's report, usually a certificate dated months ago, covering the system in general rather than your bet in particular.

Provably fair flips that around. Nobody vouches for anything. You check the individual bet yourself, with math anyone can run. The trade-off is coverage: provably fair typically applies to a casino's original in-house games, like dice, crash, mines, and plinko. Slots and live tables from big third-party studios usually run on certified RNG instead, because the studio controls the randomness, not the casino.

The two systems answer different questions. Audits ask "is this generator fair overall?" Provably fair asks "was this exact roll fixed?" A trustworthy crypto casino often offers both.

What provably fair doesn't prove

Here's the honest limit, and it matters. Provably fair proves the result of each bet wasn't rigged after the fact. It does not make the game favorable to you. The rules themselves set the house edge, before anyone hashes a seed.

Think of a dice game that pays slightly less than true odds on every roll. Every result can verify perfectly, forever, and the casino still keeps its built-in margin over time. Fair means the dice aren't loaded. It doesn't mean the price of playing is good. Those are separate questions, and provably fair only answers the first one.

It also says nothing about the rest of the operation. Verification can't tell you whether withdrawals get paid, whether the license is real, or whether support answers emails. Treat it as one strong trust signal among several, not a substitute for the full checklist.

Sources

• NIST — FIPS 180-4: Secure Hash Standard — retrieved July 2026
• iTech Labs — RNG and game testing laboratory — retrieved July 2026
• eCOGRA — Independent testing and certification agency — retrieved July 2026

Try verifying a bet yourself with the provably fair calculator — paste any casino's seeds and see the cryptographic proof.