What Is a WebRTC Leak?

WebRTC (Web Real-Time Communication) is a browser technology that enables peer-to-peer video calls, voice chat, and file sharing without plugins. To establish direct connections, WebRTC uses STUN servers to discover your IP addresses — including both your public IP and local network IPs. This happens at the browser level, completely bypassing your VPN tunnel.

Even with a VPN active, a malicious website can use JavaScript to trigger WebRTC and discover your real IP address through ICE (Interactive Connectivity Establishment) candidates. This is one of the most common VPN leaks, and many users are unaware their browser is exposing their identity.

How to Disable WebRTC

In Firefox, type about:config in the address bar and set media.peerconnection.enabled to false. In Chrome, install an extension like "WebRTC Leak Prevent" since Chrome doesn't allow disabling WebRTC natively. Brave has a built-in option under Settings > Privacy > WebRTC IP Handling Policy. For complete protection, use a VPN with built-in WebRTC leak prevention.