Provably fair, explained
"Provably fair" is one of those phrases that gets stamped on a lot of sites and explained by almost none of them. It means something specific and checkable: the result of your box was locked in before you opened it, and you can prove that yourself afterwards. No trust required, no "just believe us". This guide explains the three ingredients, how they combine into a drop, and how to verify a spin step by step.
The problem provably fair solves
With an ordinary random system, you have to take the operator's word that the draw was honest and that nobody nudged the result after seeing what you would win. There is no way to check. Provably fair removes that blind trust by committing to the outcome in advance, in a way that cannot be altered later but also cannot be peeked at early.
It does this with cryptography, specifically a hash function, and three values: a server seed, a client seed, and a nonce.
The three ingredients
Server seed
The server seed is a secret random string generated by the site for your session. Crucially, before you open anything, you are shown a SHA-256 hash of that seed, not the seed itself. A hash is a one-way fingerprint: it is easy to produce from the seed, but practically impossible to reverse. Because you hold the fingerprint up front, the site is locked in. It cannot swap the seed later without the hash no longer matching, and it cannot show you the real seed early without giving the game away.
Client seed
The client seed is your contribution to the randomness, and you can edit it. Because part of the input comes from you, the site cannot have pre-arranged the whole outcome on its own. Change your client seed and you change the result space, which is exactly the point: your input is baked into the draw.
Nonce
The nonce is just a counter that increases with each spin, so the same server and client seed pair produce a different result every open. Spin one uses nonce 0, the next uses nonce 1, and so on. It keeps every draw unique without needing a brand new seed each time.
How a drop is decided
When you open a box, the system combines the server seed, your client seed, and the current nonce, then runs them through the hash function. The output is a long hexadecimal string. A defined slice of that string is converted into a number, typically scaled to a range like 0 to 100. That number is then mapped onto the box's odds table.
Picture the odds laid out as bands on a line from 0 to 100. The common items take the widest bands, the rare items take narrow ones, and the legendary item takes a sliver. Wherever your number lands, that is your item. Because the number came from a hash of values that were committed before the open (your editable seed plus a hashed server seed), the result was effectively fixed the instant you spun, and the reel animation just shows it to you.
How to verify a spin yourself
After the spin, the site reveals the previously hidden server seed. Now you can check everything.
- Confirm the seed. Hash the revealed server seed with SHA-256 and compare it to the hash you were shown before opening. If they match, the seed was not swapped.
- Recreate the input. Combine the revealed server seed, your client seed, and the nonce for that spin, exactly as the site did.
- Recompute the result. Run the combination through the same hash and conversion, map the number onto the odds table, and confirm you land on the item you were given.
On TroveDrops there is a one-click verifier that does this for any past spin, but the value of provably fair is that you do not have to use ours. You can recompute it independently with the same public method and get the same answer. If the recomputed item matches and the seed hash matches, the spin was fair, full stop.
What provably fair does and does not promise
Provably fair guarantees that a result was not tampered with and that the odds applied are the odds shown. That is a strong, meaningful guarantee. What it does not do is change the odds in your favour or make a box profitable to open. The rare item is still rare; fairness just means the rarity is honest and verifiable. For how those odds and expected value actually work, read mystery box odds.
Frequently asked questions
What does "provably fair" actually mean?
It means the outcome of your spin was committed before you opened, using a hashed server seed, and that you can recompute the exact result afterwards from the revealed seed, your client seed, and the nonce. You can prove the draw was honest rather than trusting a claim.
Why is the server seed shown as a hash first?
So the site is locked in without showing you the result early. The hash is a one-way fingerprint of the seed. You hold it before opening, then check the revealed seed against it afterwards to confirm nothing was swapped.
What is the client seed for?
It is your input into the randomness, and you can change it. Because the draw depends on a value you control, the operator cannot have scripted the whole outcome on its own.
Does provably fair improve my odds?
No. It proves the published odds were applied honestly, but it does not change them. Rare items stay rare. Fairness is about verifiability, not better chances. See are mystery boxes worth it for the honest expected-value picture.
Want to put it into practice? Open a box and reveal the seed, or read how mystery boxes work for the full flow.
Mystery boxes are entertainment for adults. 18+, play responsibly.