How to check for a WebRTC leak
WebRTC powers in-browser calls — and can quietly hand a website your real IP address, even when you're connected through a VPN.
What it is
WebRTC lets browsers do real-time audio, video and file transfer without plugins. To connect two peers directly, the browser collects candidate IP addresses — including your local network IP and sometimes your real public IP.A web page can read these candidates with a few lines of JavaScript, no permission prompt required.
Why it matters
If you use a VPN for privacy, a WebRTC leak can expose the very thing you're hiding: your real public IP. That links your “anonymous” session straight back to your home connection.
How to check
Open the tool above and look at the WebRTC result. It lists the candidate IPs your browser exposes and flags any that are public (an outward leak) versus LAN (local only, not a leak).
How to fix
- Use a VPN or extension with WebRTC leak protection.
- In Firefox set
media.peerconnection.enabledtofalse; in Chrome use a reputable WebRTC-control extension. - Disable IPv6 if it isn't tunnelled.
- Re-test to confirm only LAN candidates remain.