WebRTC is an innovation that allows real-time peer-to-peer (P2P) communication and file sharing within a browser. With WebRTC, there’s no more need to download apps (like Skype and Viber) or any browser plug-ins. In fact, Skype has ventured into WebRTC, so that tells you how WebRTC is changing the web communication industry.
You may be taking advantage of WebRTC already if you’re using Facebook products like Messenger, Facebook Live, Workplace by Facebook, and Instagram Live Video Chat. Then there’s also Amazon Alexa, Connect, and Mayday which are using the technology as well. However, it is with Google Hangouts where WebRTC has started it all.
Disabling WebRTC in Chrome for Android
This is all good, but there’s a downside: WebRTC poses a danger to
As WebRTC is supported by most browsers (including Google Chrome for Android), IP leaks become a problem even if you’re using a
WebRTC leak tests
Here’s the test result of an Android device showing a partial WebRTC leak. As you can see, the device’s local IP address is shown:
The following image also shows a WebRTC leak. But this time, it looks like the
We also used ExpressVPN’s WebRTC leak detector. The result is shown below:
While we are on the subject of
How to disable WebRTC in Chrome for Android
While it’s scarier to see your actual IP address in the leak test result, all scenarios we described above are not ideal for your privacy.
Fun fact: WebRTC is far more likely to be used by a website to get your IP address than it is to enable real-time audio/video. Learn more about WebRTC and privacy from @shivan_kaul https://t.co/qppNJV66VO
— Mallory (@MalloryKnodel) July 25, 2018
This only shows that a leak is happening and that people with bad intentions can take advantage of this vulnerability.
Thankfully, there is a way to disable WebRTC in Chrome Android, unlike in other browsers where you have to rely on extensions.
Follow the steps below to disable WebRTC on Chrome for Android:
- Type in chrome://flags/ in the address bar.
- Type WebRTC on the search box to easily find all settings related to WebRTC.
- Look for WebRTC Stun origin header, and disable it. Note that some websites advise having this setting enabled. Our tests have shown that you must disable it.
- You may also disable WebRTC hardware video decoding and WebRTC hardware video encoding. If it makes you feel better, go ahead and disable all WebRTC-related settings there.
- Tap on Relaunch Now.
- Test for WebRTC leak again. We used BrowserLeaks. Although RTCPeerConnection and RTCDataChannel are still true, there’s no more IP address detection.
It’s the same result with ExpressVPN’s WebRTC test, as shown below:
Disabling WebRTC in other browsers
As previously mentioned, WebRTC is supported by most browsers, including Firefox, Opera, and Chrome for desktop.
While Chrome for Android has a built-in capability to disable WebRTC, for other browsers, it’s not as easy as that. Still, it’s possible to turn off WebRTC on other browsers.