What is a WebRTC leak?
WebRTC is the browser technology behind video calls in Google Meet, Discord and similar apps. To connect two people directly, the browser collects its network addresses, including the public IP it learns from a STUN server, and any website can start this process without asking for permission.
If that STUN request travels outside your VPN tunnel, it reveals your real internet provider address. Good VPN apps block this, but browser-only VPN extensions and proxies often do not.
How to read the results
- Public IPs exposed: the public addresses STUN servers saw. If they match the IP shown below, there is no leak.
- Leaked: a public address that differs from the one websites see. With a VPN on, this is usually your real address. This includes an IPv6 address leaking past an IPv4-only VPN.
- Local network IPs: "Hidden by your browser (mDNS)" is the safe default in current Chrome, Edge, Firefox and Safari. A shown address such as 192.168.1.20 is not your public IP, but it makes your browser easier to fingerprint.
- "WebRTC isn't available": WebRTC is disabled in this browser, so it cannot leak.
How to fix a WebRTC leak
- Use your VPN's desktop or mobile app rather than only a browser extension, and turn on its leak protection and kill switch.
- Brave: Settings, Privacy and security, WebRTC IP handling policy, choose "Disable non-proxied UDP".
- Chrome and Edge: install Google's "WebRTC Network Limiter" extension, or enable "Prevent WebRTC from leaking local IP addresses" in uBlock Origin's settings.
- Firefox: open about:config and set media.peerconnection.enabled to false. This turns WebRTC off completely, so browser-based calls stop working.
- Reload this page and press "Run again" to confirm the leak is gone.