Stop WebRTC leaking your real IP
If your VPN is on but WebRTC exposes a different public IP, websites can see where you really are.
A WebRTC leak is when your browser gives a website your real public IP address even though a VPN is on. WebRTC, the browser feature behind video calls, asks outside servers which addresses it can be reached on, and some VPN setups let that request go around the tunnel. A system-wide VPN app or one browser setting stops it.
Check for a leak
- Turn your VPN on.
- Run the Lag Check and open the privacy and leak section of the result.
- Read the WebRTC row. It compares the public addresses WebRTC finds with the address our server sees for the same visit.
What the result means
- No leak: WebRTC reports the same public address the site sees, which is your VPN's. Nothing to fix.
- Leaking, with an address listed: that address reached the page outside the VPN. If it is your home address, use the fixes below.
- No WebRTC address found: WebRTC is blocked or switched off in this browser, so it can't leak.
Fix it
- Use your VPN's app, not a browser extension, and turn on its kill switch. System-wide tunnels rarely leak.
- Firefox: open
about:configand setmedia.peerconnection.ice.default_address_onlytotrue. To disable WebRTC entirely, setmedia.peerconnection.enabledtofalse(this breaks browser video calls). - Brave: Settings โ Privacy and security โ WebRTC IP handling policy โ Disable non-proxied UDP.
- Chrome / Edge: install uBlock Origin and enable Prevent WebRTC from leaking local IP addresses in its settings, or use your VPN provider's WebRTC protection.
Then run the Lag Check again and confirm the leak row says "No leak".
What a leak exposes
Your public IP address shows a website roughly where you are, usually to the nearest city, and which provider you use. That is what a VPN is meant to hide, and it is all a WebRTC leak gives away: not your browsing history, your files or your exact address. Without a VPN there is nothing extra to leak, because every site already sees that address.
Common questions
Does a WebRTC leak matter if I don't use a VPN?
No. Without a VPN or proxy, every website already sees your public IP address, so there is nothing extra to leak. It matters only when you are using a VPN to hide that address.
Will turning off WebRTC break video calls?
In the browser, yes: web versions of meeting and voice apps rely on it. The gentler settings in this guide keep calls working and send them through the VPN instead, though a call may then connect through a relay.
Can websites see my local IP address (192.168.x.x)?
Normally not. Current versions of the major browsers replace local addresses with random names before a page can read them. The address that matters is the public one, which is what this guide and the leak check look at.
How do I test for a WebRTC leak?
Turn your VPN on and run the Lag Check. Its privacy section compares the public address WebRTC finds with the one our server sees. "No leak" means they match; an address listed there is one that got around the VPN.
Made a change? Measure again to see the difference.
Run the Lag Check