Back to Guides

WebRTC

How to protect yourself from exposing your IP with WebRTC.

WebRTC allows users to have video and audio communications directly in the browser without any plugins installed. An unfortunate side-effect is that your real IP/IPs risk being exposed and strip you of your anonymity. In our tests we've been able to confirm that the issue is present in Windows and to a lesser extent on Android, Linux, and OS X. We have not been able to reproduce the issue on iOS.

To see if WebRTC is enabled and if you're leaking your real IP you can go here https://diafygi.github.io/webrtc-ips/ . If you have disabled WebRTC or your browser does not support it, no IP addresses should show up under Your local IP addresses: or Your public IP addresses:.

Please keep in mind that disabling WebRTC of course will lead to WebRTC applications not working. Therefore you might want to re-enable it when you're not using Mullvad.
You can read more about WebRTC here https://en.wikipedia.org/wiki/WebRTC

Android

Use Firefox.  Disable WebRTC in Firefox by following the instructions in the Firefox section.


iOS

Use Firefox or Chrome on iOS. Chrome on iOS does not seem to implement the vulnerable parts of WebRTC yet.

 

Chrome

There is no known working solution, only a plugin that is easily circumvented. Please use Firefox instead.
If you're an advanced user you may want to look at the Advanced options in the end of this document

 

Firefox

There is a plugin for Firefox to disable and enable WebRTC. You can download it here https://addons.mozilla.org/en-US/firefox/addon/happy-bonobo-disable-webrtc/
Press "+ Add to firefox" and then press "Install now". A little icon will turn up next to the address bar. It disables WebRTC by default. If you click it, it will turn grey which means WebRTC is enabled.

If you wish to manually disable or enable WebRTC you can use these instructions:
To disable:

    Enter "about:config" in the address bar and press enter
    Press the button "I'll be careful, I promise!"
    Type in "media.peerconnection.enabled" in the search bar (there should be only one entry)
    Right-click the entry choose "Toggle", the column "Value" should now be "false"

To enable:

    Enter "about:config" in the address bar and press enter
    Press the button "I'll be careful, I promise!"
    Type in "media.peerconnection.enabled" in the search bar (there should be only one entry)
    Right-click the entry choose "Toggle", the column "Value" should now be "true"
 

Internet Explorer

Internet explorer does not implement WebRTC yet.

 

Safari

Safari does not implement WebRTC yet.

 

Advanced options

For advanced users there is the NoScript plugin for Firefox and the ScriptSafe plugin for Chrome. If you install any of these or are already using one of them you are protected for as long as you do not allow javascript on any of the websites you visit.
This allows you to make a tradeoff and allow websites that you're sure do not use WebRTC or that you're not afraid to disclose your real IP to. Be aware that these plugins break many sites if you do not allow javascript on them.