Every online casino tells you its games are fair. Almost none of them let you check. Provably fair is the cryptographic method that replaces that promise with proof: instead of trusting an operator's word, you can mathematically verify that the outcome of a bet was decided before you placed it and was never altered afterwards.
This guide explains the system in plain language, shows you exactly how to verify a result, and covers the questions players ask most often.
The problem provably fair solves
In a traditional online casino, the random number generator runs on a server you cannot see. When you lose a hand, you have no way of knowing whether the deck was genuinely shuffled or quietly adjusted. Regulators address this with periodic audits, which means an external laboratory tests the software occasionally and issues a certificate. That is useful, but it is retrospective and general. It says nothing about your spin at 02:14 last night.
Provably fair inverts the model. Rather than asking you to trust the operator and its auditor, it hands you the evidence for every individual bet and lets you check it yourself, at any time, with no special software.
The three ingredients
Every provably fair result is produced from three inputs. Understanding what each one does is the whole concept.
1. The server seed
A long random string generated by the casino and kept secret while you play. Before you place a single bet, the casino shows you the SHA-256 hash of that seed. A hash is a one-way fingerprint: it is trivial to compute from the seed, but computationally impossible to reverse. Publishing the hash up front commits the casino to that exact seed. If it later swapped the seed to engineer a loss, the fingerprint would no longer match and the fraud would be immediately visible.
2. The client seed
A string supplied by you. You can accept the randomly generated default or type your own. This is the part that makes the system genuinely two-sided: because the casino committed to its seed before it knew yours, and your seed contributes to every outcome, neither party can steer the result alone.
3. The nonce
A counter that increases by one with each bet. It ensures that the same seed pair never produces the same result twice — bet number 1 and bet number 2 use identical seeds but different nonces, and therefore different outcomes.
How a result is actually generated
The three inputs are combined with HMAC-SHA256, a keyed hash function that is standard across the security industry:
HMAC_SHA256(server_seed, client_seed + ":" + nonce)The output is a 64-character hexadecimal string. The game converts the first characters of that string into a number and maps it onto the game's outcome space — a multiplier for Crash, a roll from 0 to 99.99 for Dice, a tile layout for Mines, a card for HiLo.
The critical property is that this function is deterministic. The same three inputs always produce the same output, on any computer, in any programming language. That is precisely what makes independent verification possible.
Verifying a result yourself, step by step
- Note the hashed server seed shown in the fairness panel before you start. This is the casino's commitment.
- Set or note your client seed. If you want to be maximally rigorous, type your own — something the casino could not have predicted.
- Play your bets. The nonce increments automatically with each one.
- Rotate the seed. When you request a new seed pair, the casino reveals the old server seed in full. This is the essential step: the secret is only disclosed once it can no longer be used.
- Check the commitment. Run SHA-256 on the revealed server seed. The result must match the hash you were shown in step 1, character for character. If it does, the casino used the seed it committed to.
- Recompute the outcome. Feed the revealed server seed, your client seed and the nonce into HMAC-SHA256 and apply the game's conversion rule. You should reproduce the exact result you saw on screen.
Any independent SHA-256 tool will do — you do not have to use the casino's own verifier, and arguably you should not. That is the point: the verification does not depend on the operator.
What provably fair does not guarantee
This is where a lot of players get confused, so it is worth being blunt.
Provably fair proves that a result was not manipulated. It does not mean the game is free of a house edge. Every casino game keeps a small mathematical margin — that is how the business exists at all. A provably fair Dice game with a 1% house edge is still a game you are expected to lose money on over a long enough run. The cryptography guarantees honesty, not profit.
It also does not make results predictable. Because the server seed is secret until it is rotated, you cannot compute future outcomes in advance. Anyone selling a "provably fair predictor" is selling you nothing.
Finally, verification only covers games whose outcome is generated in-house. Third-party provider slots run on the studio's own certified RNG and are audited conventionally rather than verified per bet.
Which games can be verified
At NeonBet the full in-house catalogue is provably fair, including Crash, Dice, Mines, Limbo, Plinko, Tower, HiLo, Wheel, Keno, Blackjack and Roulette. Each one exposes its seed pair and nonce in the fairness panel, and each publishes the exact conversion rule it uses to turn the hash into an outcome.
Good practice for players
- Set your own client seed rather than accepting the default. It costs five seconds and removes the last theoretical objection.
- Rotate seeds periodically — for example after a long session. Rotation is what unlocks verification of everything that came before.
- Verify occasionally, not obsessively. Checking a handful of results at random is statistically sufficient; if outcomes were being tampered with, a single mismatch would expose it.
- Keep a record of the hashed seed before a big session if you intend to audit it later.
Frequently asked questions
Can the casino change the result after I bet?
No. The outcome is fully determined by the server seed, your client seed and the nonce. The server seed was committed to via its hash before you played, so altering it after the fact would break the hash match and be detectable by anyone.
Why is the server seed kept secret at all?
Because if you knew it, you could compute every upcoming result and the game would cease to be a game. Secrecy during play plus full disclosure afterwards is what makes the scheme work.
Does a new client seed improve my odds?
No. Changing seeds changes which specific outcomes you get, but every seed pair is drawn from the same distribution. The expected value is identical.
Is provably fair the same as being licensed?
No, and the two are not interchangeable. Provable fairness is a technical property of the game engine. Licensing covers player funds, dispute resolution, responsible gambling obligations and identity checks. A serious operator offers both.
Do I need to be a programmer to verify a result?
No. The two operations involved — computing a SHA-256 hash and an HMAC-SHA256 — are available in free online tools and in every major programming language. If you can copy and paste, you can verify.
The bottom line
Provably fair moves the question from "do I trust this casino?" to "does the maths check out?" — and the second question has an objective answer you can obtain yourself in about a minute. It does not eliminate the house edge and it will not make you a winner, but it does remove any doubt that the game you played was the game you were shown.
You can inspect the seeds behind any of your bets from the fairness page, and read more about how randomness is generated in our guide to RNG and fair play.