Shuffle Keno Verifier
Recompute the 10 numbers drawn for one bet on Shuffle from the server seed, client seed and nonce. Same HMAC-SHA256 stream the operator publishes, run in your browser.
Verification Inputs
Recomputes as you type. Nothing leaves your browser.
Keno Result
Paste the server seed and client seed from the bet. The keno result appears here as you type.
Shuffle documents the same byteGenerator (HMAC-SHA256 over clientSeed, nonce and cursor; 32 bytes as 8 four-byte floats) and the same event mapping for the games listed here (article revision 2026-08-12). Its code blocks are images, so the prose is what was checked. Not listed: Crash and Slide (hash-chain seeded), Limbo and Tower (formula and difficulty table not in the prose), Coinflip and Hilo (side and card index order not in the prose).
How Shuffle derives a Keno result
From float to result
What to compare
Where the seeds are
bytes = HMAC_SHA256(key = serverSeed, msg = clientSeed:nonce:round) // round starts at 0float = b0/256 + b1/256^2 + b2/256^3 + b3/256^4 // 4 bytes per floatresult = game event mapping applied to the floats, in orderOther Shuffle games
Keep what you worked out.
A free account saves your bankroll plans, sessions and the results you run here, on every device. No card, no upsell.
Frequently Asked Questions
Does my pick count change the draw?
No. The house draws 10 numbers for every bet. Your picks only determine how many of those 10 were hits.
Why are the drawn numbers sorted?
For display. The draw order is fixed by the floats, but Keno pays on the set of hits, so order does not matter to the result.
Which Shuffle algorithm does this use?
Shuffle Help Center, Provably Fair: Implementation + Game Events, read 2026-09-20. The byte stream is HMAC-SHA256 of clientSeed:nonce:round keyed by the server seed, converted to 4-byte floats, then mapped to the 10 numbers drawn.
Do my seeds leave the browser?
No. The HMAC and SHA-256 run with the Web Crypto API on your device. The share link carries the seeds only because you copied it.
