---
title: "DNS & WebRTC Leak Test"
description: "Check if your VPN is leaking your real IP address through DNS or WebRTC. Instantly detect DNS server mismatches, WebRTC local IP exposure, and other privacy leaks."
url: https://findutils.com/network/dns-leak-test/
category: network
---

# DNS & WebRTC Leak Test

Check if your VPN is leaking your real IP address through DNS or WebRTC. Instantly detect DNS server mismatches, WebRTC local IP exposure, and other privacy leaks.

**Use this tool:** [DNS & WebRTC Leak Test](https://findutils.com/network/dns-leak-test/)

## Programmatic access

- Browser-only: this tool works on a file, the DOM, or a browser API and has no REST or MCP id.

## Why test for DNS and WebRTC leaks?

Even when you use a VPN, your browser can leak your real identity through two common channels: DNS queries and WebRTC connections. A DNS leak sends your website lookups to your ISP's DNS servers instead of your VPN's, revealing which sites you visit. A WebRTC leak exposes your local network IP address directly to websites. Both can compromise your privacy even with an active VPN connection.

## Tips for Preventing Leaks

- Always enable the kill switch feature in your VPN client to prevent traffic from bypassing the VPN tunnel.
- Use your VPN provider's DNS servers rather than third-party DNS like Google or Cloudflare when privacy is the priority.
- In Firefox, set media.peerconnection.enabled to false in about:config to completely disable WebRTC.
- Chrome users can install the WebRTC Leak Prevent extension to control WebRTC behavior.
- Run this test periodically, especially after VPN updates or network changes, to catch new leaks early.

## Frequently Asked Questions

### What is a DNS leak?

A DNS leak occurs when your DNS queries (the requests that translate website names to IP addresses) bypass your VPN tunnel and go directly to your ISP's DNS servers. This reveals which websites you visit to your ISP, even though your web traffic itself is encrypted by the VPN.

### What is a WebRTC leak?

WebRTC (Web Real-Time Communication) is a browser feature used for video calls and peer-to-peer connections. It can reveal your real local and public IP addresses to websites, bypassing your VPN entirely. This is because WebRTC uses STUN servers to discover your IP, and these requests may not go through the VPN tunnel.

### How do I fix a DNS leak?

Configure your VPN to use its own DNS servers (most VPN clients have this option). Alternatively, manually set your DNS to a privacy-focused provider like Cloudflare (1.1.1.1) or Quad9 (9.9.9.9) and enable DNS-over-HTTPS in your browser settings.

### How do I fix a WebRTC leak?

In Firefox, type about:config in the address bar and set media.peerconnection.enabled to false. In Chrome, install the WebRTC Leak Prevent extension. Some VPN clients also include built-in WebRTC leak protection.

### Should I run this test with my VPN on or off?

Run it both ways. First without a VPN to see your baseline (your real IP and ISP DNS servers), then with your VPN active to verify everything is routed through the VPN. If the results look the same in both cases, your VPN is leaking.

### What leaves my device during the test?

Four kinds of request. Your browser asks the Google, Cloudflare, and Quad9 DNS-over-HTTPS resolvers which resolver answers for it, asks a Google STUN server for your addresses to check WebRTC, and asks ip.findutils.com for your public IP. No test result is uploaded anywhere. ip.findutils.com, a FindUtils service, keeps standard request logs, described in the privacy policy.

## Related Tools

- [IP Address Lookup](https://findutils.com/network/ip-address-lookup/)
- [DNS Lookup](https://findutils.com/network/dns-lookup/)
- [DNS Security Scanner](https://findutils.com/network/dns-security-scanner/)
- [Security Headers Analyzer](https://findutils.com/network/security-headers-analyzer/)
- [SSL Certificate Checker](https://findutils.com/network/ssl-certificate-checker/)