🔒 Provably fair
How do you know the deal isn't rigged? On BombPot you don't have to trust us — you can verify every hand yourself with cryptography.
The commit-reveal shuffle
- Before any cards are dealt, the server generates a secret random seed and publishes a commitment — the SHA-256 fingerprint of that seed. The commitment can't be reversed into the seed, but it locks it in.
- The entire shuffle is derived deterministically from the seed (a SHA-256 counter-stream drives a Fisher–Yates shuffle of the 52-card deck). Same seed → same deck, every time.
- After the hand, the server reveals the seed. Anyone can hash it and confirm it matches the commitment shown earlier — proving the deck was fixed before the cards were seen and never swapped.
Why it can't be gamed
Because the commitment is published before the deal, the server can't change the seed after seeing anyone's cards without breaking the fingerprint. And because the shuffle is fully determined by the seed, the revealed seed reproduces the exact deck that was dealt — no hidden reshuffles.
Verify it yourself
In any game, tap the 🔒 Fair badge. During the hand you'll see the commitment; once the hand ends you'll see the revealed seed and a Verify button. Verification runs entirely in your own browser: it re-hashes the seed to check the commitment and rebuilds the deck with the same algorithm the server uses — so you're trusting math, not us.