18+ Gamble responsibly. Get help
Free tools: Simulator · Verifier · Calculator

Provably Fair Plinko Verifier

Recompute any crypto plinko drop from its server seed, client seed, and nonce, entirely in your browser. The tool checks the revealed seed against its committed hash, derives the exact left-right path, and shows the bin and multiplier that path must produce. If the casino showed you anything else, you have cryptographic proof.

AM
Built and maintained by Arjun Mehta, Provably Fair Engineer at Crypto Plinko. Last updated July 17, 2026.

What provable fairness actually is

Provably fair is a commit-and-reveal scheme. Before you play, the casino generates a secret server seed and shows you only its SHA-256 hash. That hash is a binding commitment: the operator cannot swap in a different seed later without the hash failing to match. You contribute your own client seed, which the casino cannot predict, and every bet increments a nonce counter. Outcomes are computed from all three, so neither side can steer a result alone: the casino locked its input before your first drop, and your input entered after theirs.

The scheme does not make the game generous, and it is important to be honest about that. Provable fairness proves the ball landed where the seeds said it must; it says nothing about the payout table, which still carries a 1% house edge you can inspect in our plinko odds calculator. Fair and favorable are different words. Our post on is plinko rigged covers why that distinction answers most rigging complaints.

The exact construction this tool recomputes

The major crypto plinko operators use the Stake-style path derivation, and this verifier implements it byte for byte. The game computes HMAC-SHA256(serverSeed, clientSeed:nonce:cursor), where the cursor starts at 0 and increments whenever more bytes are needed. Each 32-byte HMAC block is split into 4-byte groups, and each group becomes a float in [0,1) by summing byte fractions: b1/256 + b2/256^2 + b3/256^3 + b4/256^4. Every float maps to one row of the board via floor(float x 2): 0 sends the ball left, 1 sends it right. A 16-row drop needs sixteen directions, so it consumes cursor blocks 0 and 1.

The landing bin is simply the count of rights. That number, applied to the payout table for your rows and risk setting, fixes the multiplier before any animation plays. When you press verify, the tool runs this pipeline on your inputs, renders each derived direction, and, if you supplied the pre-round hash, first confirms that SHA-256 of the revealed seed equals the commitment. Everything executes in your browser through the Web Crypto API; your seeds never leave the page.

How to verify a real plinko drop, step by step

  1. Before you play, open the fairness section of the game and copy the hashed server seed. This is the commitment; save it somewhere the casino cannot edit, like a local note.
  2. Set or note your client seed, then play your session. Each drop increments the nonce by 1 under the same seed pair, so drop number 12 is nonce 12 at most operators (some start counting at 0; check both if a result is off by one drop).
  3. Rotate your seed in the same fairness settings when the session ends. Rotation retires the active pair and makes the casino reveal the old server seed in plain text.
  4. Paste everything here: revealed server seed, the hash you saved, your client seed, the nonce of the drop you want to check, and the rows and risk you played. The tool confirms the hash, rebuilds the path, and shows the bin and multiplier the math demands.

If you want to rehearse the flow with nothing at stake, our plinko simulator has a provably fair mode that commits, reveals, and rotates seeds exactly the same way, and its drops verify in this tool.

Finding your seeds at each site we review

All four of our partner sites publish the values this tool needs; the wording and menu placement vary, so treat the specifics below as a general map rather than a pixel guide. At each of Stake, Roobet, Gamdom, and Rainbet, the plinko game exposes a fairness or provably fair modal, typically reachable from an icon or menu inside the game frame, that shows the active client seed, the hashed server seed, and the current nonce, alongside a control for rotating or requesting a new server seed. Rotating is what triggers the reveal of the retired seed, and past bets generally keep a record of the seed pair and nonce they used in your bet history or bet details view.

If a site ever refuses to reveal a rotated seed, or a revealed seed fails the hash check here, that is a red flag worth documenting with screenshots. Our individual reviews cover how responsive each operator is on fairness questions: see the Stake Plinko review, Roobet Plinko review, Gamdom Plinko review, and Rainbet Plinko review, and the deep dive in provably fair plinko for the full seed lifecycle.

Verifier FAQ

What does it mean if the verification fails? +
Two failures matter differently. If the revealed seed does not hash to the committed value, the site swapped seeds, which is provable manipulation. If the hash checks out but the derived bin differs from what you were paid on, the site is not following its published construction. Either way, save everything and stop playing there.
Why do I have to rotate my seed before verifying? +
The server seed must stay secret while it is active; if you could see it mid-session you could predict every future drop. Rotation retires the seed pair, at which point the casino reveals the old seed and every drop made under it becomes checkable.
Does a passing check mean the casino is fair overall? +
It proves the drops you checked were determined by the committed seeds and not altered afterwards. It does not vouch for unverified bets, and it says nothing about the house edge, which is separate math: every standard plinko table keeps 1% regardless of fairness. Our odds calculator covers that side.
Do you store the seeds I paste here? +
No. The verifier runs entirely in your browser with the Web Crypto API; there is no server call carrying your data, which you can confirm in your browser's network tab. Nothing is logged, and closing the tab clears everything.

Practice the full fairness flow first

The simulator commits a hashed seed, plays on your client seed and nonce, and reveals on rotation, exactly like the real sites. Rehearse the whole verification loop with play chips.

Open the Plinko Simulator