The Main Privacy Risks When Using the Internet
Every website you visit can see your IP address — a number that identifies your device and reveals your approximate location, your ISP, and the type of connection you are using. Advertisers, trackers, and data brokers use your IP address to build a profile of your online behaviour across different websites and sessions. Simply visiting a website is enough to expose this information without any login or account required.
Your DNS queries are a separate and equally significant privacy exposure. Every time you visit a website your device sends a DNS query to translate the domain name into an IP address. These queries reveal every website you visit to your DNS provider — which is typically your ISP by default. Even if you use a VPN, a DNS leak can send these queries directly to your ISP rather than through the VPN's private servers.
WebRTC is a browser feature that can expose your real IP address to websites even when a VPN is active. It operates at the browser level and bypasses VPN protection at the network level — meaning your real IP can be visible to any website running WebRTC scripts, regardless of your VPN status. This affects Chrome, Firefox, Edge, and most other major browsers by default. Learn more about WebRTC leaks.
IPv6 is a growing privacy risk that most VPN users overlook. Many ISPs now assign IPv6 addresses alongside IPv4, but not all VPNs protect IPv6 traffic. If your VPN only tunnels IPv4, your real IPv6 address is exposed in the torrent swarm, in WebRTC connections, and in direct website requests — creating a persistent identifier that is harder to mask than IPv4. Test your IPv6 exposure here.
Free Tools to Test Your Internet Privacy
Use these free tools to test each privacy risk on your current connection:
How to Improve Your Internet Privacy
Step 1 — Use a Trusted VPN
A VPN encrypts your internet traffic and replaces your real IP with the VPN server's IP, preventing your ISP from monitoring your activity. Choose a provider with an independently audited no-logs policy and built-in DNS leak protection.
Step 2 — Fix WebRTC in Your Browser
Install the WebRTC Network Limiter extension in Chrome or disable WebRTC in Firefox via about:config. See the full guide at WebRTC leak prevention.
Step 3 — Switch to a Private DNS Server
Replace your ISP's DNS with Cloudflare 1.1.1.1 or Google 8.8.8.8 to stop your ISP logging your DNS queries. See Check DNS Server to verify what DNS you are currently using.
Step 4 — Enable Your VPN Kill Switch
A kill switch blocks all internet traffic if your VPN drops, preventing your real IP from being briefly exposed during reconnection. Enable it in your VPN client settings.
Step 5 — Test Regularly
VPN updates, browser updates, and network changes can all reintroduce leaks. Run a full privacy test at VPN Leak Test after any major update or when connecting to a new network.
Privacy is about controlling who can see your data and online activity. Security is about protecting your data from being stolen or compromised. A VPN primarily improves privacy by hiding your activity from your ISP and masking your IP. Security measures like HTTPS, strong passwords, and two-factor authentication protect you from attackers. Both are important and complementary.