WebRTC can reveal your local and public IP addresses through STUN servers even when a VPN is active. Run this test to see if your browser exposes IPs outside the VPN tunnel.
Browsers use ICE/STUN to discover network interfaces for peer connections. These requests can return your real public IP before the VPN adapter is used, leaking identity to JavaScript on web pages.
If the test shows only your VPN exit IP, you pass. If you see your ISP IP or local LAN address alongside the VPN IP, you have a WebRTC leak.
It can. Unless WebRTC is disabled or the VPN client blocks STUN, browsers may still query STUN servers and expose your real IP to websites.
Disable WebRTC in browser settings, use a browser extension, or choose a VPN client that forces all WebRTC traffic through the tunnel.