What is WebRTC and Why is it Dangerous?
WebRTC (Web Real-Time Communication) is a standard built directly into Google Chrome that allows websites to access your microphone and camera, and stream audio/video peer-to-peer without needing any external plugins. It is the technology that powers browser-based video calls like Google Meet or Discord web.
While very convenient, WebRTC has a major, fundamental flaw: to establish a peer-to-peer connection, it must bypass your VPN and reveal your true, underlying local and public IP addresses. If you are using a VPN to protect your privacy, any website can exploit a “WebRTC Leak” using simple JavaScript to completely unmask your real identity. If you prioritize privacy over browser-based video calling, you should disable this feature.
How to Disable WebRTC in Google Chrome
Unlike Firefox, Google Chrome does not have a built-in “off switch” or chrome://flags toggle to completely disable WebRTC. You must use an official extension to block the protocol at the browser level.
- Open Google Chrome on your desktop.
- Navigate to the Chrome Web Store.
- In the search bar, type WebRTC Network Limiter.
- Look for the extension officially offered by
webrtc.org(which is maintained by Google). Click Add to Chrome. - Once installed, click the Extensions puzzle piece icon in the top right corner of Chrome and pin the WebRTC Network Limiter icon to your toolbar.
- Click the newly pinned icon and select Options.
- In the options menu, select the strictest setting: Use my proxy server (if present). (If you don’t use a proxy, select the option to only use your default route).
This extension forces Chrome to route all WebRTC traffic exclusively through your active network path (like your VPN), completely preventing the protocol from querying your hardware for your hidden, real IP address.