EN
Compare VPNs

Home Tools

WebRTC leak test

  1. IP address
  2. WebRTC leak
  3. DNS leak

The test only starts when you click. Your browser then asks a STUN server run by Cloudflare, the company that already delivers this site, for its own address. We store nothing.

Next test: DNS leak

The test asks your browser which addresses it would reveal through WebRTC and puts them next to the address you loaded this page from.

How to test your VPN

  1. Turn your VPN off and click Start the test. The page remembers the addresses it finds now.
  2. Turn your VPN on and pick a server. Keep this page open.
  3. Click Test again. If an address from the first test comes back, the page reports a leak.

The addresses from the first test are kept only in this page’s memory. They are gone when you close or reload the page.

VPN on: what the website sees, without and with a WebRTC leak

No leak

  1. YouEncrypted tunnel
  2. VPN serverrun by the VPN provider
  3. The website

    Sees: the VPN server's IP address, also when it asks through WebRTC.

With a WebRTC leak

  1. YouEncrypted tunnel
  2. VPN serverrun by the VPN provider
  3. The website

    Sees: the VPN server's IP address for the page itself, and through WebRTC your own address as well.

What the result means

ResultMeaning
No public address via WebRTCWebRTC revealed nothing, or your network does not let the request through
The same address the page sawWebRTC shows nothing new. With the VPN on, that is the VPN server’s address
An address from your first test comes backA leak: WebRTC bypasses the tunnel
Local addresses onlyAddresses that exist only inside your own network. Most browsers mask them

What the test does not tell you

  • Nothing about DNS leaks. Use the DNS leak test for those.
  • Only this browser. Another browser or app on the same device can behave differently.
  • No verdict on your VPN. A test without a leak holds for this server and these settings, at this moment.

The rules browsers should follow for addresses in WebRTC are set out in RFC 8828. Check your ordinary address with the IP tool. Which providers state leak protection themselves is listed with a source on each page in the provider overview.

What a VPN changes about this address

A VPN replaces the address websites see with that of the VPN server. A leak means your browser still gives away your own address by another route; the VPN app has to tunnel or block WebRTC to prevent that. Whether an app does is in its settings and in the provider's help pages, not in its price.

What a VPN costs today: the three lowest prices

Per provider the lowest advertised price per month, which goes with the longest term, paid up front. Dollar prices are compared in euro at the ECB reference rate of 2026-10-30. Cheapest is not the same as best: this is not a ranking.

We currently earn nothing from these links: the buttons go to the providers' normal websites. How this works

  1. Private Internet Access €1.79 / mo · 36 months Checked 2026-11-02
    See price at Private Internet Access
  2. PureVPN Standard $2.15 ≈ €1.92 / mo · 24 months · $58.20 up front, covers 27 months Checked 2026-11-02
    See price at PureVPN
  3. CyberGhost VPN €2.19 / mo · 24 months · €56.94 up front, covers 26 months Checked 2026-11-02
    See price at CyberGhost VPN

Advertised prices · Belgium

Frequently asked questions

What is a WebRTC leak?WebRTC is the technology browsers use for direct voice and video calls. To set up such a connection the browser looks up its own addresses, and a website can ask for them. If that lookup bypasses your VPN, the website sees your real address while the rest of your traffic goes through the tunnel.
The test shows an IPv6 address the page did not see. Is that a leak?Not without a VPN: if you have both IPv4 and IPv6, your browser loads the page over one of them and WebRTC finds both. With the VPN on it is a leak if that IPv6 address comes from your internet provider. That is why you run the test without the VPN first: the page compares the two.
What do I do if the test shows a leak?Check in your VPN app’s settings whether leak protection exists and is switched on, and whether the app tunnels or blocks IPv6. Some providers offer a browser extension that shields WebRTC. Then test again.
Who sees my address during this test?Your browser sends one request to a STUN server run by Cloudflare, which replies with the address the request came from. Cloudflare already delivers this site and so processes your address anyway. The addresses found stay in your browser: the page does not send them to us.

All tools