Free tool · Runs in your browser · Nothing stored

VPN leak test

A VPN that leaks is worse than no VPN, because you stop being careful. This page checks the two most common browser-side leaks in a few seconds.

Websites seeChecking… Network… WebRTC found…

↻

Testing WebRTC…

Asking your browser for the addresses it would hand to a video call.

This test covers WebRTC address discovery and IP consistency. Resolver-level DNS leak testing needs dedicated DNS infrastructure and is not part of this page yet; the guide below shows how to check your resolver by hand.

What this test does

First it fetches the public address websites see, the same check as our IP checker. Then it asks your browser's WebRTC stack to gather connection candidates, exactly as a video call would, and compares every address that comes back against the first one. If a different public address surfaces, something is routing around your VPN.

DNS is the other classic leak: your lookups can keep flowing to your internet provider even with the tunnel up, handing them a full list of the sites you visit. Read what a DNS leak is and how to find and fix one. ROOT sends DNS through the tunnel to our own resolvers, and the app's kill switch stops traffic escaping when the tunnel drops.

Leak test FAQ

What is a WebRTC leak?

WebRTC is the browser technology behind video calls. To connect two people directly it asks the network for your addresses, and a badly behaved setup will reveal your real public IP that way even while a VPN is on. This page triggers that same discovery and shows you what leaks out.

What about DNS leaks?

A DNS leak is when your lookups still go to your internet provider\u2019s resolver while the VPN is on, telling them every site you visit. Detecting the exact resolver requires infrastructure this page does not use yet, so we test WebRTC and IP consistency here. ROOT routes DNS inside the tunnel, and you can read how to check resolvers manually in the guide below.

The test found a local address ending in .local. Is that a leak?

No. Modern browsers hide your device\u2019s local addresses behind random .local names precisely to stop this kind of snooping. Those are safe. A leak is when a real public address that differs from your VPN address shows up.

How do I fix a WebRTC leak?

Use a VPN whose app blocks leak routes, or disable WebRTC in your browser if you never use video calls. ROOT\u2019s kill switch and full-tunnel mode keep WebRTC traffic inside the tunnel.

Leaks are a plumbing problem. Get better plumbing.

ROOT VPN tunnels everything, DNS included, with a kill switch for when networks misbehave. Free to start.

Get ROOT VPN, free