Skip to content
Tools

Shuffle Wheel Verifier

Recompute the landing segment and its multiplier on Shuffle from the server seed, client seed and nonce. Same HMAC-SHA256 stream the operator publishes, run in your browser.

Verify one betAnalyze a range
Casino
Game
Examples

Verification Inputs

Recomputes as you type. Nothing leaves your browser.

Wheel Result

Paste the server seed and client seed from the bet. The wheel result appears here as you type.

Algorithm sourceShuffle Help Center, Provably Fair: Implementation + Game Eventschecked 2026-09-20

Shuffle documents the same byteGenerator (HMAC-SHA256 over clientSeed, nonce and cursor; 32 bytes as 8 four-byte floats) and the same event mapping for the games listed here (article revision 2026-08-12). Its code blocks are images, so the prose is what was checked. Not listed: Crash and Slide (hash-chain seeded), Limbo and Tower (formula and difficulty table not in the prose), Coinflip and Hilo (side and card index order not in the prose).

How Shuffle derives a Wheel result

From float to result

One float multiplied by the segment count gives the segment index. The multiplier is read from the operator's published payout table for that segment count and risk level.

What to compare

Compare the segment and multiplier with the spin in your bet history.

Where the seeds are

Open the bet in your history on Shuffle. The client seed and nonce show immediately. The unhashed server seed appears only after you rotate your seed pair, so rotate first, then verify every bet from the old pair.
The byte stream, Shuffle
bytes = HMAC_SHA256(key = serverSeed, msg = clientSeed:nonce:round) // round starts at 0float = b0/256 + b1/256^2 + b2/256^3 + b3/256^4 // 4 bytes per floatresult = game event mapping applied to the floats, in order

Other Shuffle games

Keep what you worked out.

A free account saves your bankroll plans, sessions and the results you run here, on every device. No card, no upsell.

Frequently Asked Questions

Why does the multiplier depend on the risk level?

The wheel is the same; the payout table under each segment changes with risk. Each published table averages 0.99 per spin.

What if my wheel has a segment count that is not listed?

Then this page shows the segment only. It never invents a multiplier for a table the operator has not published.

Which Shuffle algorithm does this use?

Shuffle Help Center, Provably Fair: Implementation + Game Events, read 2026-09-20. The byte stream is HMAC-SHA256 of clientSeed:nonce:round keyed by the server seed, converted to 4-byte floats, then mapped to the landing segment and multiplier.

Do my seeds leave the browser?

No. The HMAC and SHA-256 run with the Web Crypto API on your device. The share link carries the seeds only because you copied it.