Fix WebRTC Leaks

Prevent browsers from exposing your real IP through WebRTC STUN requests while a VPN is active.

WebRTC enables real-time communication in browsers. To establish peer connections, browsers query STUN servers and may discover local network interfaces and your ISP public IP — even when a VPN tunnel carries normal HTTP traffic.

Test for WebRTC leaks

Connect your VPN and open rookvpn.com/check/vpn-leak-test/webrtc. If you see your home ISP IP or LAN addresses (192.168.x.x, 10.x.x.x) alongside the VPN exit IP, you have a WebRTC leak.

Browser mitigations

• Firefox: set media.peerconnection.enabled to false in about:config, or use strict privacy modes.
• Chrome/Edge: install a WebRTC leak prevention extension or use a browser build that blocks STUN.
• Brave: Shields may reduce exposure; verify with RookCheck — defaults change between versions.

VPN client options

Some VPN clients include WebRTC leak protection at the OS level. Hiddify TUN mode routes more traffic than system proxy alone but may not block all STUN without browser cooperation — combine client and browser fixes.

Related

• VPN leak testing guide
• Hiddify setup