WebRTC IP exposure: what addresses a browser can reveal

WebRTC uses ICE to discover candidate paths for real-time communication. Modern browsers apply privacy controls to local addresses, but observed candidates can still reveal useful network information depending on browser, VPN and configuration.

Which IP addresses WebRTC can expose

WebRTC uses ICE to discover paths between peers and can produce candidates containing local, server-reflexive or relay addresses. Which addresses a test can observe depends on the browser, network configuration, VPN policy and the use of STUN or TURN.

How to test WebRTC with and without a VPN

Run the test before and after connecting the VPN and compare the ICE candidates, especially public addresses and candidate types. Modern browsers may hide or mask local addresses, so interpret the result in the context of the browser and VPN policy. For a control check of visible IP data, use 2ip privacy check before and after the VPN.

How to interpret the result

Technical references: RFC 8445.