We already know this about you.
You have not clicked anything yet. Every website you open gets this much, and more.
Free · no signup · nothing stored · no trackers
Free IP, DNS and WebRTC leak test: what we check
Every website you open learns a lot before you click. whatileak shows you the same view, then goes deeper than a "what is my IP" page: 40+ checks, run in your own browser, scored 0–100 with an A–F grade and an ordered fix list.
- Address. Who owns your IP (home provider, mobile carrier, VPN, Tor or a hosting network), the name attached to it, the town it places you in, and whether your clock contradicts your VPN.
- DNS. Which resolver answers your lookups, whether it escapes your VPN (the classic DNS leak), and whether encrypted DNS is reachable on your network.
- WebRTC. Whether a side channel hands out an address your VPN was hired to hide (the WebRTC leak), with dual-stack IPv6 told apart from a real leak.
- Browser fingerprint. Canvas, audio, graphics card, fonts and hardware, and whether they form a permanent ID or are randomised, blanked or faked by your browser.
- Device and settings. Model and OS version, connection type, camera and microphone counts, battery, privacy signals, tracker blocking, languages.
How the scan works
Our edge reports what it already saw in your connection: address, network, location, handshake, headers. Everything else runs as JavaScript in your browser: STUN for WebRTC, a resolver probe for DNS, canvas and audio rendering, font detection. Your results are not uploaded. The whole thing takes about ten seconds.
Questions people ask
How is this different from a "what is my IP" site?
Those pages show about five facts. We read 40+ signals, explain each in plain words, tell real leaks apart from false alarms, and include the two tests that actually break a VPN: WebRTC and DNS.
What is a WebRTC leak?
WebRTC is the browser feature behind video calls. It can reveal your real IP address through a side channel even while a VPN hides it from normal traffic. Any site can read it with a few lines of JavaScript. We check whether the address WebRTC reveals differs from the one your page arrived with.
What is a DNS leak?
Every site name you type is looked up by a DNS resolver. If that resolver belongs to your home ISP while your traffic goes through a VPN, the ISP still sees every site you visit. We identify which resolver answered for you and whether it sits outside your privacy network.
Does it work with a VPN, Tor or Brave?
Yes. VPN and Tor exits are recognised and scored as hidden. Brave's fingerprint randomisation, Tor's UTC clock and dual-stack IPv6 addresses count as protection, not as leaks.
Is my scan uploaded or stored?
The scan runs in your browser and your results are not uploaded. No account, no cookie, no ad network. The service keeps basic usage statistics to operate and improve.
Disclaimer
This scan is informative only. Results are best-effort measurements and may be inaccurate or incomplete. Not for commercial use. We accept no responsibility for decisions made based on these results. Use at your own risk.
you
Waking the probes…
…
100 = nobody learns anything. 0 = you are an open book.
Your privacy, piece by piece
The big leaks
Your identity card, as any website sees it
Your fingerprint
What you sent us before saying hello
Close these first
Disclaimer: this scan is informative only. Results are best-effort measurements and may be inaccurate or incomplete. Not for commercial use. We accept no responsibility for decisions made based on these results. Use at your own risk. A few outside lookup services see your IP address in order to answer the instant rows; they receive nothing else, and we store nothing.