Browser privacy and WebRTC leak test

Browsers can expose some network and device characteristics to websites. WebRTC connectivity checks may reveal addresses beyond the one the web server sees, depending on browser privacy controls and network setup.

Open the optional browser privacy test

The main checker opens in its existing compact interface. Results are not indexed as public content.

What is a WebRTC IP leak?

WebRTC helps browsers connect real-time audio, video and data applications. During connection setup it gathers possible network paths, called ICE candidates. Depending on the browser, candidates may contain a public IP address, an IPv6 address, a local IP or an obfuscated local mDNS name.

A second public IP is not automatically a vulnerability. It matters most when someone expects a VPN, proxy or privacy setting to prevent a website from learning any other address. Results should be interpreted against your own intended network setup.

What the xMyIP test does

The browser test stays idle until you expand Browser privacy on the homepage and press Start privacy test. It creates a temporary WebRTC peer connection and uses Google’s public STUN service to gather candidate addresses.

Candidate information and selected browser details are then sent to the xMyIP diagnostics API to produce findings. Do not run the optional check if you do not want to make that WebRTC/STUN request or share those details with the diagnostic service.

Why browsers show different results

Modern browsers often mask private IP candidates with mDNS hostnames. Some corporate networks, restrictive firewalls, VPN clients and browser extensions suppress candidate gathering or block STUN traffic.

A test that detects no extra public IP may simply mean the browser blocked the technique. It does not prove that the browser is untrackable or protected from all fingerprinting methods.

How to improve privacy

Keep your browser current, inspect its site permissions and review VPN leak-prevention settings. Consider testing both before and after a VPN connects to understand the difference, without assuming all differences are dangerous.

The xMyIP check is informational; it does not alter browser settings. It is distinct from a complete security or privacy audit.

For the optional WebRTC test, open the homepage and expand “Browser privacy & WebRTC leak test” beneath the port results, then select Start privacy test.

These remote diagnostic results are point-in-time observations, not a security certification. Scan only systems you own or have permission to test.