whatileak

We already know this about you.

You have not clicked anything yet. Every website you open gets this much, and more.

Your IPv4
Your IPv6
Where you are
Who connects you
Who answers your DNS
Your clock says
Your device

Free · no signup · nothing stored · no trackers

Most IP sites show you 5 things. We read 40+ signals, including the two that actually break a VPN: WebRTC and DNS.

Free IP, DNS and WebRTC leak test: what we check

Every website you open learns a lot before you click. whatileak shows you the same view, then goes deeper than a "what is my IP" page: 40+ checks, run in your own browser, scored 0–100 with an A–F grade and an ordered fix list.

  • Address. Who owns your IP (home provider, mobile carrier, VPN, Tor or a hosting network), the name attached to it, the town it places you in, and whether your clock contradicts your VPN.
  • DNS. Which resolver answers your lookups, whether it escapes your VPN (the classic DNS leak), and whether encrypted DNS is reachable on your network.
  • WebRTC. Whether a side channel hands out an address your VPN was hired to hide (the WebRTC leak), with dual-stack IPv6 told apart from a real leak.
  • Browser fingerprint. Canvas, audio, graphics card, fonts and hardware, and whether they form a permanent ID or are randomised, blanked or faked by your browser.
  • Device and settings. Model and OS version, connection type, camera and microphone counts, battery, privacy signals, tracker blocking, languages.

How the scan works

Our edge reports what it already saw in your connection: address, network, location, handshake, headers. Everything else runs as JavaScript in your browser: STUN for WebRTC, a resolver probe for DNS, canvas and audio rendering, font detection. Your results are not uploaded. The whole thing takes about ten seconds.

Questions people ask

How is this different from a "what is my IP" site?

Those pages show about five facts. We read 40+ signals, explain each in plain words, tell real leaks apart from false alarms, and include the two tests that actually break a VPN: WebRTC and DNS.

What is a WebRTC leak?

WebRTC is the browser feature behind video calls. It can reveal your real IP address through a side channel even while a VPN hides it from normal traffic. Any site can read it with a few lines of JavaScript. We check whether the address WebRTC reveals differs from the one your page arrived with.

What is a DNS leak?

Every site name you type is looked up by a DNS resolver. If that resolver belongs to your home ISP while your traffic goes through a VPN, the ISP still sees every site you visit. We identify which resolver answered for you and whether it sits outside your privacy network.

Does it work with a VPN, Tor or Brave?

Yes. VPN and Tor exits are recognised and scored as hidden. Brave's fingerprint randomisation, Tor's UTC clock and dual-stack IPv6 addresses count as protection, not as leaks.

Is my scan uploaded or stored?

The scan runs in your browser and your results are not uploaded. No account, no cookie, no ad network. The service keeps basic usage statistics to operate and improve.

Disclaimer

This scan is informative only. Results are best-effort measurements and may be inaccurate or incomplete. Not for commercial use. We accept no responsibility for decisions made based on these results. Use at your own risk.