See the IP address websites get from you and find out if your browser has WebRTC, DNS or IPv6 leaks.
This usually takes a few seconds.
With the Bebra app, websites see our server’s address in the country you pick, not yours.
Try BebraThis is the address your browser used to reach our check server. Other websites usually see the same address.
WebRTC is what makes calls and video chats work in the browser. To connect people directly, the browser learns its addresses from a STUN server, and any website can read them without asking your permission. If one of them isn’t our server’s address, websites can see it even with the VPN on.
Type about:config in the address bar and accept the warning. Find media.peerconnection.ice.default_address_only and set it to true. If you don’t need calls in the browser, you can turn WebRTC off completely by setting media.peerconnection.enabled to false.
Chrome, Edge and Yandex Browser have no built-in setting for this. Install Google’s WebRTC Network Limiter extension and, in its options, choose the setting that limits WebRTC to your main connection. Opera and Brave on desktop have this setting built in. Look for WebRTC in their privacy and security settings.
In the app, open Tunnel and choose Off. In this mode, all device traffic goes through the VPN.
Browsers on Android usually have no WebRTC setting. In the app, open Tunnel and choose Off. In this mode, all device traffic goes through the VPN.
After making changes, reconnect in the app (tap “Disconnect”, then the country tile) and press “Check again”. If the leak is still there, contact support on Telegram at @bebravpn.
Before opening a website, the browser asks a DNS server for the site’s address. If these requests bypass the VPN, your provider can see which sites you visit. With the VPN on, the list usually shows Cloudflare, Google, Quad9 or OpenDNS in the VPN server’s country. That’s normal.
In For Russia mode, requests to Russian services, including Yandex DNS, go directly rather than through the VPN, so in this mode the check may show Yandex as a leak.
Restart your computer if you haven’t done so since installing the app. DNS protection on Windows starts working after a restart.
Find “Use secure DNS” in your browser’s privacy or security settings. If it’s set to Yandex or your provider’s DNS, choose Cloudflare or turn it off.
In Firefox, open Settings → Privacy & Security and find DNS over HTTPS. Choose Cloudflare as the provider or select Off.
To send all DNS requests through the VPN, open Tunnel in the app and choose Off. Then reconnect (tap “Disconnect”, then the country tile) and press “Check again”.
Many internet providers assign two kinds of addresses, IPv4 and IPv6. Our app works over IPv4 and blocks IPv6 while you’re connected. If a website still sees your IPv6 address, some requests bypass the VPN.
Reconnect in the app (tap “Disconnect”, then the country tile) and press “Check again”. If your IPv6 address is still visible, contact support on Telegram at @bebravpn.
We don’t store your check results.
Websites can use these traits to recognize your browser without cookies. The values are calculated in your browser and aren’t sent anywhere.
Your browser determines your coordinates from GPS and nearby Wi-Fi networks, so a VPN usually doesn’t change them. A website gets them only if you allow it. This page doesn’t send them anywhere.
Every site you visit gets your IP address. That alone tells it roughly where you are and who your internet provider is. With a VPN on, the site gets an address that belongs to the VPN server.
This page compares your address with the addresses of Bebra VPN servers and shows how you’re connected to the internet. Your browser then checks three channels through which a website can learn your real address or provider despite the VPN. These are WebRTC, DNS and IPv6.
WebRTC powers voice and video calls in the browser. To link callers directly, it hands the site your device’s addresses. If the browser gets an address that skips the VPN, the site can see the one your provider gave you, even with the VPN on.
A DNS server translates a site’s name into its address. Requests that bypass the VPN show your provider which sites you visit and hint to websites which country you’re in.
If a VPN carries only IPv4 and the browser opens a site over IPv6, that request goes out directly from your real address. Our app blocks IPv6 while you’re connected.
A few of our servers use more than one outgoing address, so the address a site sees won’t always match what the app shows.
This is normal, and the address still belongs to our server. If the app is connected but this page shows no VPN, see the list of causes under the result.
media.peerconnection.ice.default_address_only to true. From then on, WebRTC sticks to your main connection.All other data on this page is handled as on the rest of the site, under our privacy policy.
It means websites see the address of a Bebra VPN server instead of yours, and the WebRTC, DNS and IPv6 checks found no leaks. If a check couldn’t be completed, the cards under the result say so. The check covers only the browser this page is open in, not other apps on your device.
The page may be open in our app’s built-in browser on Android, or your browser may be on the “Apps that bypass the VPN” list. Another possible cause is a VPN or proxy built into the browser itself. The full list of causes appears under the result. If none of them fits, contact support on Telegram at @bebravpn.
Some of our servers have several outgoing addresses, and websites see one of them. That’s normal, and the address still belongs to our server.
Open the card with the leak. It has tips for your browser and operating system. After making changes, reconnect in the app (tap “Disconnect”, then the country tile) and press “Check again”.
A VPN changes your IP address, but not your device’s clock or language. Websites can notice the mismatch, but it doesn’t mean anything is wrong with the VPN.
We don’t store them. Our server receives your IP address and browser headers to answer the request and doesn’t record the result. The DNS check result is kept by bash.ws, the service that runs that check, and the page fetches it from there. Your browser fingerprint and coordinates aren’t sent anywhere.
Yes. The page shows your address and provider, and the WebRTC, DNS and IPv6 cards list the addresses and servers the checks found. Leaks are evaluated only when you’re connected to Bebra VPN, and only then does the page show “Your connection is protected”.