Provably Fair vs RNG: Which Should You Trust?

Provably fair and RNG are two different ways an online casino shows that a game result was random. Provably fair lets you check each result yourself using a seed pair and a hash, while a certified RNG is tested in an independent laboratory but stays a black box to the player. Choose provably fair when you want per-bet verification, and a certified RNG game when you want a regulated title from a named studio.

Both approaches answer one question: did the casino generate this result by chance, or did it pick an outcome that suits it? The difference is who checks, and when. This guide explains the mechanics of each model and where each still relies on trust. If you are new to the idea, start with our provably fair guide.

How do provably fair and certified RNG compare?

Provably fair and a certified RNG answer the same question in opposite directions. Provably fair makes the operator publish proof before the bet and lets you check it after, while a certified RNG makes a laboratory check the generator in advance and you never see the maths. The table below lays the two models side by side.

What does provably fair actually mean?

Provably fair means a game proves each result was generated as promised, using cryptography rather than a casino’s word. The operator publishes the hash of a secret server seed before you bet, then reveals the raw seed after the round. Because a hash cannot realistically be reversed, publishing it first locks the operator to that seed, so you can recompute the hash and confirm nothing was changed.

At the centre is a hash: a short, fixed-size fingerprint of a piece of data. SHA-256, the hash used by many provably fair games, turns any input into a 256-bit digest, described in RFC 6234. The keyed version, HMAC-SHA256, combines a secret key with the data and is defined in RFC 2104. This is what turns the seeds into a game result.

How does a provably fair game decide each result?

A provably fair result is built from three inputs: a server seed chosen by the operator, a client seed you supply or the browser generates, and a nonce that counts up by one for every bet. These three are combined with HMAC-SHA256, a keyed hash, to produce a long hexadecimal string that is converted into the game outcome. After the round, the operator reveals the raw server seed so you can recompute the result.

The order matters. The operator hashes the server seed and publishes that hash before you place the bet, which commits it to that seed without revealing it. Your client seed stops the operator from precomputing the outcome, and the nonce keeps every bet distinct. This three-part design is the standard described in Chainlink’s technical guide to provably fair randomness.

Here is a worked example for a dice game that shows a roll from 0.00 to 99.99. Many dice games read the first eight characters of the 64-character hash as a 32-bit number. As an illustration, the characters 8b1f2c3d read as the integer 2,334,075,965. Dividing by 2^32 minus 1 (4,294,967,295) gives 0.5434, and multiplying by 10,000 gives 5,434, shown as a roll of 54.34. This is an illustrative example; the exact conversion differs between games, so check the game’s own fairness page.

How is a certified RNG different?

An RNG, or random number generator, is the software or hardware that produces each game’s numbers. A certified RNG is tested by an independent laboratory before it can be used, but the player cannot inspect each result. Labs such as iTech Labs and eCOGRA review the source code and test the raw output and the scaled, shuffled numbers that games actually use.

Two kinds of generator are tested. A pseudo-random number generator (PRNG) starts from a seed and produces a long, unpredictable-looking sequence, while a hardware generator draws from physical entropy such as electrical noise. iTech Labs evaluates the source code and tests both PRNG and hardware output at the raw level and after scaling and shuffling. eCOGRA, founded in 2003, is an independent laboratory accredited to ISO/IEC 17025 across 47 jurisdictions.

The certificate is a trust mark, not a per-bet proof. A regulator or a laboratory confirms the generator behaved randomly when it was tested, but you cannot open a single spin and check it the way you can with a provably fair game. We explain how fairness checks fit into scoring on our how we rate casinos page.

Which games use provably fair, and which use a certified RNG?

Provably fair started with simple crypto games and now reaches some slots and table games. Dice, crash, mines, plinko and limbo are the common provably fair formats, while most studio slots, roulette and blackjack run on a certified RNG. Provider BGaming lists about 35 provably fair titles, including Aztec Magic Deluxe and Lucky Lady Clover, so the boundary is shifting.

You can find provably fair dice games and crash-style titles at many bitcoin casinos, while classic slot games from the big studios almost always run on a certified RNG. Note that providers implement provable fairness in different ways. BGaming’s provably fair system, for example, pre-computes a Result, hashes the Result plus a Secret with SHA-256, publishes that hash before the bet, then applies your client seed to get the final outcome.

Is provably fair more trustworthy than a certified RNG?

Neither method is automatically more trustworthy; they answer different questions. Provably fair removes the need to trust the operator for randomness, because you verify each result, but you still trust that the game code maps the hash to the outcome correctly. A certified RNG moves trust to a laboratory and a regulator, but the per-bet numbers stay hidden.

Provably fair is stronger on transparency: the operator can be caught if it changes a seed after the bet. Its weak point is the code. If a game’s mapping from hash to outcome is wrong or changes silently, verifying the hash alone will not catch it, and manual checks are hard for casual players, a point Chainlink also makes. A certified RNG is stronger on accountability, because a named laboratory stands behind the certificate, but you accept the laboratory’s word instead of seeing the maths.

How do you verify a provably fair bet yourself?

To verify a bet you need three pieces: the server seed, the client seed and the nonce for that round. Put them into an HMAC-SHA256 tool, compare the result with the hash the operator showed before you bet, then follow the game’s rule for turning that hash into the outcome. If both match, the result was generated from those inputs.

1. Copy the server seed, client seed and nonce shown for the round you want to check.
2. Open an HMAC-SHA256 calculator or the verifier built into the game’s fairness page.
3. Enter the server seed and client seed, then the nonce, in the order the game specifies.
4. Compare the hash this produces with the hash published before the round began.
5. If they match, apply the game’s conversion rule, such as reading the first eight characters as a number, and confirm it equals the shown result.
6. Rotate your client seed from time to time so the operator cannot predict future outcomes.

Some casinos let you run this on the site with one click, while others expect you to use an external tool. The core check is always the same: the hash you calculate must equal the hash that was committed before the bet. If it does not, treat the result as suspect and contact support.

Does provably fair mean you will win?

No. Provably fair describes how a result is generated, not how much it pays. A game can be perfectly fair and still hold a house edge, which means the casino keeps a small share of every bet on average and most players lose over time. No verification method or strategy removes that edge.

The house edge means you should expect to lose in the long run, so only gamble with money you can afford to lose, set deposit limits and use self-exclusion tools. Help is free at gamblersanonymous.org and gamblingtherapy.org if gambling stops feeling like a choice. Read more on our responsible gambling page.

FAQ

Is provably fair the same as a certified RNG?

No. Provably fair lets you verify each result yourself with a server seed, a client seed, a nonce and a hash. A certified RNG is tested in advance by an independent laboratory and stays a black box per bet.

How do I verify a provably fair bet?

Take the server seed, client seed and nonce for the round, recompute the hash with an HMAC-SHA256 tool, and compare it with the hash published before you bet. If they match, apply the game’s rule to turn the hash into the outcome.

Which games are usually provably fair?

Dice, crash, mines, plinko and limbo are the common provably fair formats. Some providers, such as BGaming, also offer provably fair versions of slots and table games, but most studio titles run on a certified RNG.

Does provably fair mean a game will pay out more?

No. Provably fair describes how a result is generated. A fair game can still hold a house edge, so the casino keeps a small share on average and most players lose over time.

What is HMAC-SHA256?

HMAC-SHA256 is a keyed hash that combines a secret key with data using the SHA-256 algorithm. Provably fair games use it to turn a server seed, a client seed and a nonce into the result for each bet.

Is a certified RNG trustworthy?

A certified RNG has been tested by an independent laboratory, which reviews the code and the raw and scaled output. You are trusting the laboratory and the operator rather than checking each result yourself.