Free checks · No sign-up · Nothing stored
WebRTC Leak Test
A leak is a public address that is not the one this page loaded from. A private, carrier, or .local address is the tunnel or the LAN, and it is not called a leak.
What this test does that others don't
Other testers: The VPN tunnel address printed in red as LEAK.
This test: Private, carrier, and .local addresses are never a leak.
Other testers: Host, reflexive, and relay addresses in one list.
This test: Each kind is labeled, so a relay is not mistaken for you.
Other testers: An address with nothing to compare it to.
This test: Compared with the address this page loaded from.
Checking
Gathering WebRTC addresses.
Host, server-reflexive, and relay addresses are kept separate. Only a different public address is a leak.
A private address, a carrier address, a .local name, or a relay is listed so you can see it, and it is not the word Leak. This check is this browser, right now.
Questions people actually ask
Is a local IP a WebRTC leak?
No. Addresses in 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, the carrier range 100.64.0.0/10, link-local, and .local names are not reachable from a website. VPN apps add a private address for the tunnel. A test that marks it red is describing that tunnel.
Why does a VPN test say leaked when support says it is fine?
Support is usually looking at a private address that belongs to the VPN adapter, while the test printed Leak next to it. Compare it with the address this page loaded from. A leak is a second public address, not the tunnel address.
What is an .local address?
A multicast DNS name the browser uses instead of exposing a LAN address. It is not a routable IP. It does not tell a website your public address.
Country and network names come from DB-IP, used under CC BY 4.0.