πŸŒ™ LATE NIGHT MODE ACTIVATED β€” THE CLOWN IS WATCHING πŸŒ™

WebRTC.

⚑ Definition

WebRTC (Web Real-Time Communication) is a browser feature that enables direct peer-to-peer connections between browsers β€” used for video calls, voice chat, and file sharing. It has a side effect: it can expose your real IP address to websites, even when a VPN is connected.

What it's for

Before WebRTC, browser-based video calls required a relay server to forward audio and video between participants β€” expensive for the service operator and slow due to the extra hop. WebRTC lets browsers connect directly to each other, saving cost and reducing latency.

Today WebRTC powers:

  • Google Meet, Whereby, Jitsi (video conferencing).
  • Discord voice channels in the browser.
  • WhatsApp Web video calls.
  • Peer-to-peer file sharing (Snapdrop, ShareDrop).
  • Browser-based games and collaboration tools.

The leak

For two browsers to connect directly, they need each other's IP addresses. WebRTC uses a protocol called STUN to discover all the IPs your device has β€” including your real public IP, even if your traffic is currently routed through a VPN.

The discovery happens inside the browser via OS-level APIs. A JavaScript on any web page can then read those IPs and send them anywhere. Result: the site can learn your real IP despite the VPN.

Per-browser mitigations

  • Chrome / Edge: install WebRTC Network Limiter extension, or enable uBlock Origin's "Prevent WebRTC leaks" toggle.
  • Brave: built-in Privacy and Security β†’ Fingerprinting β†’ "Disable Non-Proxied UDP."
  • Firefox: about:config β†’ media.peerconnection.enabled β†’ false.
  • Safari: stricter by default, less mitigation needed.

See also

πŸŽͺ FAQ

If I disable WebRTC, what stops working?
Video calls in browsers (Google Meet, Discord browser, WhatsApp Web video), peer-to-peer file sharing (Snapdrop, ShareDrop), and a small number of games and collaboration tools. Most other browsing is unaffected. If you only sometimes need WebRTC, browser extensions can toggle it per-site.
Why does WebRTC leak my IP even with a VPN?
Because WebRTC asks the operating system for the device's network interfaces directly, which includes your real IP. The leak happens inside the browser application, not on the network β€” so the VPN's network-level encryption can't prevent it. The browser literally hands the real IP to JavaScript code on the page.
Does ClownVPN protect against WebRTC leaks?
On Android, yes β€” our VPN service captures all UDP traffic including the STUN packets WebRTC uses, so leaked IPs can't actually be transmitted outside the tunnel. On desktop browsers, you need browser-level mitigations (extensions, settings) in addition to the VPN. The leak is a browser issue, not a VPN one.

πŸŽͺ Mobile = Protected

πŸ€– Get The Free App