A dice game shows a loss. The player has one real question. Did the house tamper with that roll after the bet went down? Provably fair is the cryptographic answer to exactly that. By 2026 it’s standard kit at Stake, BC.Game, and Rollbit, common enough across crypto-native casinos that players expect it rather than shop for it. The system does what it claims. It also proves a lot less than the badge suggests. Let’s walk the machinery first. Then the part operators don’t advertise.
The Three Seeds Behind Every Roll
Provably fair runs on three inputs. A server seed, which is a random string the casino generates and keeps secret. A client seed, which the player supplies or their browser fills in, and can change whenever they like. And a nonce, a plain counter. The nonce ticks up by one with every bet under the same seed pair. That’s what keeps each roll independent. Bet a hundred times on a single seed pair and you get a hundred separate results, no repeats, no pattern to ride. Stake bolts on a fourth input, an internal cursor. It only comes into play when a game needs more randomness than a single hash can produce. Most players never see it.
The Hash That Locks the Casino In
Before any bet, the casino publishes a SHA-256 hash of its server seed. That single step is the backbone of the whole scheme. SHA-256 only runs one direction. Hashing a seed takes a millisecond. Going backwards, from the hash to the seed, isn’t feasible with any method anyone knows. So the casino hands you a fingerprint of its secret. Not the secret. And it’s locked in. Swap the server seed after the fact and the hash won’t match, which the player would spot right away. Through the whole session, the player sees that hash and nothing underneath it.
HMAC-SHA256, Where the Number Is Born
Every outcome passes through HMAC-SHA256. The server seed is the secret key. The message is the client seed, the nonce, and on Stake the cursor, strung together, roughly clientSeed:nonce:cursor. What comes out is a 32-byte digest, 64 hex characters, and it’s deterministic. Feed it identical inputs and you get an identical digest. Every time. Neither side can rig this, and that’s by design. The casino locked in its server seed before it ever saw the client seed. The player can’t see the server seed at all. From there the digest becomes a result. Stake reads it in 4-byte chunks and turns each chunk into a number from zero up toward one, using a base-256 place-value sum. Why four bytes and not one? One byte gives 256 possible values. Four gives over four billion, which is the precision these games need. For Dice, that number turns into a roll: times 10001, floored, divided by 100. Careful here, though. The conversion isn’t universal. Plenty of dice sites run HMAC-SHA512 instead and slice hex characters straight off the digest. Read the operator’s own fairness page for the exact formula.
Rotate, Reveal, Recompute
Verification kicks off with a seed rotation. The player switches to a fresh server seed pair, and that switch retires the old one. Only then does the casino reveal the previous server seed in the raw. It’s sensible design: the house can’t hand you a seed you’re still actively betting against. Two steps follow. First, hash the revealed seed with SHA-256 and check it against the hash committed before play. A match means the seed was never quietly swapped once the bets landed. Second, drop the revealed server seed, your client seed, and each nonce back into HMAC-SHA256, run the published conversion, and line the number up against what the casino actually paid. Run it on a single bet. Run it on ten thousand, the check is identical either way. It all happens in your own browser, so you’re not leaning on some verifier the casino wrote. Open-source ones exist for that reason, including a community verifier for Stake games.
Why a Provably Fair Casino Can Still Have a Hidden Edge
Operators rarely spell this next part out. Provably fair proves one thing: a given round wasn’t altered after the commitment. Nothing more. It says nothing about the house edge. A casino can run a flawless provably fair setup and still bake a 10 percent edge into a game it markets at 1 percent. The proof never touches that edge. The edge lives in the payout table and the outcome-mapping formula, not in the random number. There’s a second blind spot. Verification confirms the seed hashes correctly. It can’t prove the operator picked that seed at random rather than grinding through favorable ones ahead of time. Commit-reveal can’t stop pre-grinding. A real verifiable random function can. Commit-reveal isn’t one.
Coverage Stops at the Simple Games
It also doesn’t cover most of the casino. Provably fair fits simple in-house games: dice, crash, mines, plinko. Live-dealer tables generally fall outside it. So, as a rule, do the third-party slots from studios like Pragmatic Play and Evolution. Those run on certified RNG, and round by round there’s usually nothing for a player to check. A big weighted slot, hundreds of symbol positions and bonus triggers stacked on top, just isn’t built for per-round verification.
Verifiable in Theory, Ignored in Practice
Here’s the catch. In practice, very few players ever run the check. Doing it means understanding HMAC and base-256 math, which most casual players don’t. So they fall back on automated tools. That quietly hands the trust back, the very thing the setup was meant to remove. Or they don’t bother, and trust the brand instead. Some operators even stamp provably fair on games without shipping usable seed data. That’s a marketing label, not a working proof. None of this makes the cryptography wrong. Commit-reveal does exactly what it promises. It just promises something narrow. It proves no post-bet tampering on a covered game. It’s not a fairness certificate. Not an RTP audit. Not a stand-in for a regulator. And if you can’t read the math yourself, trust the math is really just trust with extra steps. A licensed lab might be the safer bet. Provably fair and third-party certification aren’t the same wager, and knowing the difference matters before anyone treats the badge as proof the game is fair.