PrivKitPrivKit

WebRTC Leak Test

WebRTC can reveal your real IP address even when using a VPN. This test creates a peer connection with STUN servers and checks if any public IPs are exposed through ICE candidates.

What Is a WebRTC Leak?

A WebRTC leak happens when your browser’s built-in WebRTC (Web Real-Time Communication) API exposes your real IP address to websites - even while your VPN is active. WebRTC uses STUN and TURN servers to discover your network addresses for peer-to-peer connections, and this discovery process can bypass VPN tunnels.

How Does This WebRTC Leak Test Work?

We create a peer connection using your browser’s WebRTC API and gather ICE (Interactive Connectivity Establishment) candidates from public STUN servers. Each candidate contains an IP address. If any of those IPs are public addresses that differ from your VPN exit IP, your real address is leaking.

How to Prevent WebRTC Leaks

  • Firefox: set media.peerconnection.enabled to false in about:config.
  • Chrome: use an extension like "WebRTC Leak Prevent" or switch to a VPN with built-in WebRTC protection.
  • Brave: go to Settings > Privacy > WebRTC and choose "Disable non-proxied UDP."
  • Tor Browser: WebRTC is fully disabled by default.

For browser-specific instructions, read our full guide: WebRTC Leaks Explained.

Related Tools & Guides

Frequently Asked Questions

Does disabling WebRTC break video calls?

Yes, fully disabling WebRTC will prevent browser-based video and voice calls (Google Meet, Zoom in-browser, etc.). A better approach is to use a VPN with WebRTC leak protection, which forces WebRTC traffic through the VPN tunnel instead of blocking it entirely.

Why does this test show local IP addresses?

Local (private) IPs like 192.168.x.x or 10.x.x.x are gathered during WebRTC’s ICE candidate discovery. While these do not directly reveal your identity, they can leak information about your local network topology.

What are mDNS addresses?

Modern browsers replace local IPs with random mDNS hostnames (like “abcd-1234.local”) to protect your privacy. If you see only mDNS addresses and no public IPs, your browser is already protecting you from WebRTC-based local IP leaks.