IP & WebRTC Leak Checker
Verify if your real ISP IP or local network IP is leaking past your VPN, Proxy, or Tor connection through WebRTC STUN requests.
Gathering WebRTC STUN Candidates...
Querying Google & Cloudflare STUN servers to detect candidate leaks...
, ()
How to Disable WebRTC & Prevent IP Leaks
- Type
about:configin address bar. - Search for
media.peerconnection.enabled. - Toggle it to false.
- Install extension uBlock Origin or WebRTC Leak Prevent.
- Under settings, enable "Prevent WebRTC from leaking local IP addresses".
- Go to Settings > Privacy & Security.
- Set "WebRTC IP Handling Policy" to Disable Non-Proxied UDP.
What is a WebRTC Leak & Why Do VPNs Fail to Block It?
WebRTC (Web Real-Time Communication) is an open-source standard integrated into all modern browsers that enables direct, peer-to-peer audio, video, and data transmission without requiring external browser plugins. While WebRTC powers essential tools like Google Meet, Discord, and Zoom in the browser, it contains a critical architectural security flaw for privacy-conscious users.
To establish a direct connection between two peers located behind restrictive NAT firewalls and home routers, WebRTC uses the STUN (Session Traversal Utilities for NAT) protocol over UDP packets. When a website executes a few lines of JavaScript creating an RTCPeerConnection, your browser sends a query to a public STUN server. The STUN server reflects back your true, raw external public IP address assigned by your Internet Service Provider (ISP).
Because browser STUN requests frequently bypass local proxy settings and certain flawed VPN virtual network adapter interfaces, the website learns your real geographic location and identityโeven while your browser status shows an active VPN connection!
The Three Types of ICE Candidates Harvested by Trackers
Reveals your internal local area network address (e.g. 192.168.1.45 or 10.0.0.12). Trackers use this to identify multiple devices on the same home network.
The actual public IP returned by the STUN server. If this does not match your VPN exit node IP, your entire identity and physical city are deanonymized.
Traffic routed through an intermediate relay server. This is the safest candidate type because your raw IP is not disclosed to the destination peer.
Comparison: WebRTC Leaks vs DNS vs IPv6 vs HTTP Leaks
| Leak Vector | Protocol / Mechanism | What is Exposed to Websites? | Primary Defense / Fix |
|---|---|---|---|
| ๐จ WebRTC Leak | STUN / UDP port 19302 | Real ISP Public IPv4/IPv6 & Local LAN IP | Disable WebRTC or use uBlock Origin UDP blocking |
| ๐ DNS Leak | DNS Queries (UDP port 53) | ISP DNS Server IP & Websites you visit | Enforce DNS-over-HTTPS (DoH) or VPN DNS routing |
| ๐ IPv6 Leak | IPv6 Dual-Stack Routing | Global IPv6 address tied to device MAC prefix | Disable IPv6 in OS network adapter settings |
| ๐ก๏ธ HTTP Proxy Leak | X-Forwarded-For headers | Client IP forwarded by transparent proxies | Use Elite / Anonymous Proxy or Full WireGuard VPN |
Frequently Asked Questions (FAQ)
Will disabling WebRTC break any websites?
Disabling WebRTC will only affect browser-based real-time peer-to-peer video/voice applications (like Discord web, Google Meet, or WebTorrent). Normal video streaming (YouTube, Netflix) and regular web browsing will continue functioning 100% normally.
Why is my local IP (e.g. 192.168.1.x) showing as "mDNS shielded"?
Modern browsers implement mDNS (Multicast DNS) obfuscation, which conceals your raw local private IP behind a randomized UUID hostname (e.g. c38942b0-6fd7...local) to prevent local network fingerprinting.
Does using Tor Browser protect against WebRTC leaks?
Yes. The Tor Browser completely disables WebRTC by default at the source code level to guarantee that STUN requests can never leak your true IP address outside the Tor circuit.
How often should I test for WebRTC leaks?
You should test whenever you switch to a new VPN provider, install a browser update, or connect to a new public WiFi hotspot to ensure your privacy configuration remains unbroken.
Complete Guide: How to Disable WebRTC in Any Browser
Depending on your browser engine (Gecko vs Chromium vs WebKit), disabling or restricting WebRTC STUN requests requires different configuration procedures. Follow our step-by-step instructions below:
๐ฆ Mozilla Firefox (100% Native Disable)
- Type
about:configin the URL bar and press Enter. - Click "Accept the Risk and Continue".
- Search for
media.peerconnection.enabled. - Double-click the entry or click the toggle button to set its value to false.
- Restart Firefox and re-run this leak test. WebRTC is now completely disabled.
๐ Google Chrome / Microsoft Edge
Chromium does not provide an official native UI flag to turn off WebRTC completely. You must use an extension or policy routing:
- Install the trusted open-source extension "WebRTC Control" or "uBlock Origin".
- In uBlock Origin settings, enable "Prevent WebRTC from leaking local IP addresses".
- Alternatively, use a commercial VPN browser extension that routes WebRTC traffic through its own proxy.
๐ฆ Brave Browser (Built-in Shield)
- Open Settings โ Privacy and security.
- Scroll to "WebRTC IP handling policy".
- Change the dropdown to "Disable non-proxied UDP".
- This ensures UDP STUN queries never bypass active proxy or VPN tunnels.
๐งญ Apple Safari (macOS & iOS)
- Open Safari Settings โ Advanced.
- Check "Show features for web developers".
- Go to the top menu Develop โ Experimental Features.
- Enable "WebRTC mDNS ICE Candidates" to conceal raw IP structures behind randomized tokens.
Who Needs to Test for WebRTC IP Leaks?
๐ VPN & Proxy Users
Verify that the monthly subscription you pay for actual privacy isn't compromised by a silent browser UDP leak.
๐ช Crypto & DeFi Traders
Prevent decentralized exchanges and wallet frontends from logging your real geographic identity and physical ISP connection.
๐ฐ Journalists & Researchers
Ensure sensitive research and anonymous sourcing cannot be tracked back to your physical home or office internet hookup.
๐ผ Remote Workers & Freelancers
Prevent client portals and enterprise platforms from flagging geographical anomalies or location mismatches.
๐ฎ Gamers & P2P Streamers
Protect your home network from targeted DDoS attacks by preventing malicious peers from capturing your residential IP.
๐ก๏ธ Privacy Enthusiasts
Audit your complete digital footprint across multiple devices and browsers with zero telemetry.
Related TTMAIL Privacy & Developer Tools
๐ IP Address Lookup
Find your IP address, detect VPN/proxy usage, check ISP, ASN, and view your location on an interactive map.
๐ชช Identity Generator
Generate realistic synthetic names, street addresses, postal codes, and civic IDs for 10+ countries.
๐ฑ QR Code Generator
Create custom QR codes for URLs, WiFi, vCards, WhatsApp, and more with logo upload and 50+ color presets.
๐ง Disposable Email
Generate free temporary email inboxes to receive OTPs and confirmation links without spam.