What A Server Seed Is And Why It Is Hidden
Every provably fair game rests on one piece of data you are not allowed to see while you play. That is the server seed, and the fact that it is hidden is not a loophole in the system. It is the entire mechanism. Understanding why makes the difference between trusting a fairness page because it looks official and actually being able to check it.
What it actually is
A server seed is a long random string generated by the site before a round. It is one of the inputs hashed to produce your result, alongside your own client seed and a nonce that counts up with each bet. On its own it means nothing. Combined with the other inputs it determines the outcome completely, which is why who knows it and when is the whole design.
Why you cannot see it during play
Because if you could, you would know the result before betting. The outcome is a deterministic function of the inputs, so anyone holding all of them can compute it. You already have your client seed and the nonce. Handing over the server seed too would let you check the answer and only bet when it is good. Every provably fair scheme has to hide exactly one input from the player, and this is it.
Why the site cannot change it either
This is the half people miss, and it is what makes the system worth anything. Before you bet, the site publishes a hash of the server seed. A hash is a one way fingerprint: it reveals nothing about the value, but it can only have come from that exact value. So the site has committed itself in public before seeing your bet. If it swaps the seed afterwards to make you lose, the revealed seed no longer hashes to the fingerprint it already published, and anybody can see it.
Commit and reveal, in one sentence
The site locks in its number in advance without showing it, you add your number after, and the site shows its number afterwards so you can check it never changed. Neither side can move once both have committed. That is the whole idea, and it is the same trick as sealing a prediction in an envelope before the match rather than announcing it after.
What rotation means and when to do it
A server seed usually covers many bets, with the nonce advancing each time. Asking for a new one, sometimes called rotating, causes the current seed to be revealed and a fresh hash to be published. Rotate whenever you want to settle up and verify a batch. There is no advantage to holding one for longer and no penalty for rotating often, so if you plan to check anything, rotate at the end of a session and verify then.
The check that actually proves something
When the seed is revealed, do two separate things. First, hash the revealed server seed and confirm it matches the fingerprint published before you bet. That proves the site did not swap it. Second, hash the full combination of server seed, client seed and nonce and confirm you get the recorded result. That proves the outcome came from those inputs. Only the first one catches cheating; the second only tells you the maths was done right on the values you were given.
The mistake almost everyone makes
People verify the second check, get a match, and conclude the game is honest. It is not enough. If you never saved the hash from before the round, a site could reveal any seed that produces the recorded result and your verification passes anyway. The commitment has to have been made before you knew anything, and you have to have kept a copy of it. Screenshot or copy the hash at the start, not the end.
What this does and does not guarantee
It guarantees an individual result was not tampered with after the fact. It does not tell you the house edge is reasonable, that payouts work, that the site is solvent, or that a withdrawal will be processed. Provably fair is a claim about one specific thing, and a site can be perfectly honest about every roll and still be a bad place to keep your money. Verify the maths, then judge the rest separately.
The server seed is hidden so you cannot pick your bets knowing the answer, and its hash is published so the site cannot change the answer after seeing your bet. Save that hash before you play, check it against the revealed seed afterwards, and you have proved something real. Skip that step and the verification is theatre.