VPN Clue
Menu Close

Free tool

WebRTC leak test

WebRTC lets browsers talk to each other directly for calls and screen sharing. To do that it can reveal IP addresses that bypass your VPN. This test shows what yours reveals.

Result

Running…

IP our server sees
–
Public IPs revealed by WebRTC
–
Local (private) IPs revealed
–
mDNS obfuscation
–

How this test works

The page creates a WebRTC peer connection and asks a public STUN server for the addresses it can reach you on. Browsers answer with ICE candidates that can contain your local network address, your public address, or both. We compare any public address with the address our server saw when it delivered this page. If they differ while your VPN is on, WebRTC is exposing a route around the tunnel.

What the result means

  • No public IP revealed, or it matches the server IP: no WebRTC leak in this browser.
  • A public IP that differs from the server IP: a leak. Sites using WebRTC can learn an address your VPN does not cover, typically your real ISP address.
  • Only local addresses such as 192.168.x.x: these do not reveal who you are, but they can help identify your device. Modern browsers replace them with random mDNS names, shown above as "mDNS obfuscation: yes".

How to stop WebRTC leaks

  • Use a VPN whose app blocks leaks. Most good apps send WebRTC through the VPN or block it. Our comparison table marks the providers that document this, under DNS and leak protection.
  • Firefox: open about:config and set media.peerconnection.enabled to false (this disables video calls in the browser).
  • Chrome, Edge, Brave: install the provider's browser extension or uBlock Origin and enable "Prevent WebRTC from leaking local IP addresses". Brave also offers a WebRTC IP handling policy under Privacy settings.
  • Safari: leaks are rare because Safari does not expose local addresses by default, but keep macOS and the VPN app updated.

Privacy of this tool

The test runs in your browser. It asks our server what address it sees, then opens a WebRTC connection to a public STUN server operated by Google, which learns your address the same way any STUN server does during a video call. Nothing you see here is stored by us, and no third-party script runs on the page. Close the tab and the peer connection is gone.

Related