WebRTC Leak Test

Checks whether your browser exposes your real IP behind a VPN.

Free tools that run in your browser. Nothing you type, open or create is uploaded to NerdBible or anyone else.

Starting the test...

Address websites see

Addresses WebRTC reveals

The test asks a public STUN server (Google's stun.l.google.com) which address your connection appears to come from, the same way a video call would. Nothing is stored by NerdBible.

How to use it

  1. Connect to your VPN, then open or reload this page. The test runs by itself.
  2. Compare the address websites see with the public addresses WebRTC reveals. They should match your VPN server.
  3. If another public address shows up, turn on the WebRTC leak protection in your VPN app or browser and run the test again.

Questions

What is a WebRTC leak?

WebRTC lets browsers make video and voice calls directly. To do that, a page can ask the browser for every network address it has. With some VPN setups this reveals your real public IP address even while normal browsing goes through the VPN.

What does an address ending in .local mean?

Modern browsers hide your local network address behind a random name ending in .local (an mDNS hostname). It changes regularly and does not identify you, so it is not a leak.

The test shows a different public IP. What should I do?

Turn on WebRTC or IP leak protection in your VPN app if it has one, use the VPN provider browser extension, or limit WebRTC in your browser settings. Then run the test again.

Does a private or local IP matter?

Addresses such as 192.168.x.x or 10.x.x.x only work inside your home or office network. They say little about who you are, but some trackers use them as one more fingerprinting signal.

About this tool

About the WebRTC leak test

WebRTC is the browser feature behind video and voice calls on the web. To connect two people directly, a page can ask the browser which network addresses it has. With some VPN setups, that question gets answered with your real public IP address, even though normal browsing goes through the VPN. That is a WebRTC leak.

How the test works

The page does what a video call would: it asks a public STUN server, stun.l.google.com, which address your connection appears to come from, and lists every address the browser reports. It then compares those with the address websites normally see.

Reading the result

  • Only the VPN's address appears: no leak.
  • A second public address appears: your real IP is exposed. Turn on WebRTC or IP leak protection in your VPN app, use the provider's browser extension, or limit WebRTC in your browser settings, then test again.
  • An address ending in .local: a random name modern browsers use to hide your local network address. It is not a leak.
  • Private addresses such as 192.168.x.x only work inside your home or office network and say little about who you are.

Run the test with the VPN connected; with it off, seeing your real address is expected. Nothing is stored by NerdBible.

Related tools