Skip to content

Safety and privacy

Is VoIP safe? What a browser call protects and what it exposes

By · Updated · 17 min read

TL;DR

For everyday calls, yes: browser calling runs on WebRTC, which must encrypt the audio between your browser and the service, and no page can use your microphone without your consent. The real risks sit elsewhere. A call to a landline or mobile is decoded at the provider's gateway, providers such as Google log whom you called and for how long, many browser services cannot reach 911, 112 or 999, and free dialers may show a caller ID that isn't yours.

Key facts

Is VoIP safe to use?

For ordinary calls, yes. A browser call uses WebRTC, and the standard forbids sending the audio unencrypted, so someone sharing your Wi-Fi cannot simply listen in [1]. What VoIP changes is trust rather than eavesdropping: you rely on the service to handle your call and its records honestly, and you lose things a phone line gives you, such as emergency calls and a caller ID people recognise.

The split that matters is between an app-to-app call, where both people use the same app, and a call that rings an ordinary phone number. I answered six common questions for each from the providers' own documents.

Six safety questions: app-to-app calls versus calls to phone numbers, from official pages checked on 1 November 2026
QuestionApp-to-app call (WhatsApp, Telegram)Browser call to a phone number
Can someone on my Wi-Fi hear it?No: end-to-end encrypted [2][3]Not on the browser leg: WebRTC audio must be encrypted [1]
Can the service hear it?WhatsApp says encryption keeps calls between you and the person you talk to [2]Technically yes: its gateway converts the call for the phone network [4]
Is there a record of the numbers I dial?The encryption pages I read cover call content, not call recordsYes: numbers, time and duration, for example at Google and Call2Friends [5][10]
Can it reach 911, 112 or 999?Not on WhatsApp [6]Often not: TwinPhone, Yolla and free Google Voice can't [7][8][9]; TextNow can, with limits [11]
What does the other person see?Your account; WhatsApp link guests can't see participants' numbers [12]Your own number, a rented one or a shared one, depending on the service [13][14][15]
Must I give my phone number?Yes: both register with a mobile number [6][3]It varies: Google Voice yes, TwinPhone and PopTox no [16][17][18]

Of the services compared below, only TextNow and Google Voice's paid plans say they support emergency calls; the rest exclude them or say nothing.

For the conversation itself, an end-to-end encrypted app-to-app call is the most private option. For reaching ordinary phones, a browser call is about as private as the service you pick, and the sections below show how I judge one.

Is WebRTC safe?

Yes, as a technology it is built defensively. The IETF standard behind it requires encrypted audio on every call and explicit consent before a page can use your microphone, and browsers offer the microphone only to secure (HTTPS) pages [1][19]. Its known weak spot is privacy rather than eavesdropping: setting up a call can reveal your IP addresses to the service.

Chrome adds controls on top of the standard. When a calling site asks for the microphone, you can allow it while you visit the site, allow it this time only, or never allow it, and a site can't start recording while you are in another tab or another app [20]. On a dialer I expect to use once, I pick "Allow this time".

WebRTC needs no plug-in or extra software [21], so a "free call" page that asks you to install an extension or a desktop app wants more access than a browser call needs.

On IP addresses, the IETF's own document says WebRTC can learn your VPN's public address and, with a split-tunnel VPN, the internet provider's address beneath it [22]; Messenger's help adds that 1:1 calls share your IP address with the other person's device [23]. How to test for that and limit it is in my WebRTC leak guide.

For the route a call takes from the tab to a ringing phone, see how a browser call reaches a phone.

Who can hear or see my browser call?

Four parties can: the person you call; the service you call through, whose gateway turns browser audio into an ordinary phone call; the phone carriers on the far side, which handle it like any other call; and anyone who controls your account or computer. Only on an end-to-end encrypted app-to-app call, such as WhatsApp or Telegram, are the service and the carriers kept out of the conversation itself.

The conversation: encrypted in transit, not end to end

TwinPhone, the site's sponsor, states the limit plainly: signalling and media under its control are encrypted in transit with TLS and SRTP, and the final carrier leg follows the recipient carrier's security model [4]. Yolla says its web app uses an encrypted connection when you sign in or place calls [24]. Google Meet encrypts in transit by default and offers opt-in end-to-end encryption only for calls between personal accounts [25][26].

Treat "end-to-end" on a web dialer with care. PopTox's homepage promises end-to-end WebRTC encryption, yet its terms, last updated on , say data may be transferred unencrypted [27][28]. A call that rings a landline has to be decoded at a gateway first, so it cannot be end-to-end in the strict sense.

The records: who, when and for how long

Google's privacy policy says it may collect your number, the calling and receiving numbers, the time, the duration and the routing of calls made with its services [5], and Google Voice's help says it saves call, text and voicemail information [29]. Call2Friends logs the number called, the date and the duration, and says it does not store call content [10]. Globfone lists the dialled number, time, duration and call status [30].

That also answers "can VoIP calls be traced?": yes, through those records. Google, for one, says it shares personal information when it believes disclosure is needed to respond to legal process or an enforceable governmental request [5]. On recordings, TwinPhone says personal calls are not recorded [14].

Privacy and emergency calls, service by service

WhatsApp and Telegram encrypt calls end to end but reach only their own users. Google Meet makes end-to-end encryption opt-in, and Teams (free) promises only data encryption [26][31]. The services that ring phones encrypt at most as far as their gateway. Only TextNow, and Google Voice on its paid plans, say they offer emergency calling.

Comparison
ServiceCalls phone numbersPrivacyEmergency callsSign-up needs
WhatsAppWhatsApp contacts and link guests only[32]End-to-end encrypted[2]No[6]Mobile number; web client linked by QR code[6]
Google VoiceUS, Canadian and international numbers[33]No end-to-end claim; Google stores call data[29]Not on the free plan[9]Phone number for a text code, plus ID check[34]
TwinPhoneLandlines and mobiles, 145+ countries[17]Encrypted in transit, not end-to-end[4]No: 911, 112 and 999 can't be dialled[7]Email or Google; no phone number, no card[17]
YollaMobiles and landlines worldwide[24]Encrypted connection; no end-to-end claim[24]No emergency calls[8]Phone number with SMS check (app); web unclear[35]
TextNowUS and Canada free, other countries on credit[36]Ad-funded; no end-to-end claim[11]911 with limits, US and Canada[11]Google, Apple, Facebook or email login[37]
Telegram WebTelegram users; no phone numbers found[3]End-to-end encrypted calls[3]Not statedPhone number; web login by QR code or code[38]
Google MeetNo phone numbers on personal accounts[39]Encrypted in transit; opt-in end-to-end for 1:1[26]Not stated in Meet's helpA Google account[40]
Microsoft Teams (free)Teams users and link guests only[41]Encrypted; no end-to-end claim[31]Not statedA Microsoft account (steps not checked)
PopToxMobiles and landlines; 246 countries claimed[27]Site and 2016 terms conflict on encryption[28]Not statedNone for free calls[18]
Call2FriendsMobiles and landlines worldwide[42]Logs numbers called; no encryption claim[10]Not statedNone for free calls; email for paid[42]
GlobfoneMobiles and landlines in supported countries[43]Logs numbers and call times; no encryption claim[30]Not statedEmail, SMS-verified phone and a card check[44]

On a phone, scroll the table sideways to see every column.

TwinPhone sits with the services that ring phones: encrypted in transit but not end to end, no emergency calls, and a shared caller ID unless you rent a number or verify your own [4][7][14]. In its favour on privacy, sign-up takes an email or a Google account and no phone number [17]. For prices, reach and my overall scores, see every service I compared, side by side.

Is Google Voice safe?

Yes, with caveats. Google Voice runs on your Google account, and its sign-up is stricter than most: a text code to a real phone and, for new numbers, a government ID check [16][34]. I found no end-to-end encryption claim for Voice calls in Google's help, Google keeps call records, and the free plan can't call 911. The risk I would watch most is a scam, not a hack.

The scam runs through that sign-up code. The FTC warns about strangers who have a Google Voice verification code texted to you and then ask you for it; if you hand it over, they try to create a Google Voice number linked to your phone number [45]. Never read a verification code to anyone who contacted you first.

Personal Google Voice accounts are available only in the US [48]. If that or the ID check rules it out, my notes on Google Voice alternatives compare the options.

Are free calling websites safe?

Mostly safe to open, but each one asks you to trust an operator you know little about. The free dialers I checked differ less in technology than in paperwork: who runs them, what they log, what they claim about encryption and which number they show.

What three free web dialers disclose about themselves, read on 1 November 2026
What I checkedPopToxCall2FriendsGlobfone
Who runs itA private company in San Jose, California; no legal entity named [15]IKozlov LLC, with Russian-format registration numbers I couldn't verify [49][50]i-Trends Sp. z o.o., Gdynia, Poland [30]
What it logsSays it doesn't record calls or sell data [27]Number called, date and duration; no call content [10]Number dialled, time, duration and call status [30]
Encryption claimEnd-to-end on the homepage; the 2016 terms say data may go unencrypted [27][28]None foundNo end-to-end claim for calls to phones
Caller ID shownOne shared number, 218-414-1141 [15]Your number after an SMS check, on paid calls [51]Your SMS-verified number [30]
What you hand overNothing for free calls [18]Nothing for the free call; an email for paid calls [42][52]An email, a phone verified by SMS and a card check [44]

What I check before typing a number

Be careful with StartACall, HelloAirDial and MySecondLine. When I read their sites on , StartACall's terms had a template placeholder where the governing law belongs [53], HelloAirDial's terms named no company or jurisdiction [54], and MySecondLine's homepage showed "Lorem ipsum" filler text [55]. I wouldn't give any of them my number or a card. Which free dialers are still online, and the limits they state, are in free browser dialers I checked.

Emergency calls and caller ID: two limits to know first

Two gaps matter more than encryption for most people. Many browser services cannot connect 911, 112 or 999 and others don't say, so a browser phone should never be your only phone. And the number the other person sees depends on the service: it may be yours, a rented one or a shared one, which affects who answers and whether they can call you back.

Emergency calls

WhatsApp's terms exclude emergency services, TwinPhone and Yolla can't dial them, and Google Voice supports 911 only on paid Starter, Standard and Workspace accounts [6][7][8][9]. TextNow is the exception, routing 911 in the US and Canada with limits [11]; the details, and what to do outside the US, are in my guide to emergency calls from a computer.

Caller ID

Yolla shows your own number, Google Voice your Voice number and PopTox one shared number for everyone [13][33][15]; TwinPhone shows a shared number that can't be called back unless you rent a number or verify your own, and it won't display a number you can't prove is yours [14]. Why that matters when you call a bank or an office is covered in my caller ID explainer.

How to make browser calls safer

Six habits cover most of the risk, and none needs technical skill. I list them from the one that protects most, choosing the right kind of call, down to the backup every browser caller should keep: a phone line that can reach emergency services.

  1. For a private conversation, use an end-to-end encrypted app-to-app call. WhatsApp Web now makes such calls in the browser, though the feature is still rolling out [56][57].
  2. Grant the microphone per site, choose "Allow this time" on one-off dialers, and remove old permissions in Chrome's site settings [20].
  3. Turn on 2-Step Verification on the account you call from, so a stolen password alone doesn't open it [46].
  4. Never read out a verification code to someone who contacted you [45].
  5. Before calling a bank, a doctor or a government office, check which caller ID your service shows; a shared number may go unanswered.
  6. Keep a mobile or landline within reach for 911, 112 or 999.

In this guide

Frequently asked questions

Is VoIP more secure than a landline?

Not automatically. The browser leg of a VoIP call must be encrypted [1], but a call to a landline or mobile is handed to the phone network at the provider's gateway, and from there it follows the carrier's security model [4]. The more private option is an app-to-app call with end-to-end encryption, such as WhatsApp or Telegram.

Can VoIP calls be traced?

Yes. Providers keep call records: Google may log the numbers, time, duration and routing of calls [5], Call2Friends logs the number called, the date and the duration [10], and Globfone lists the dialled number and call times [30]. Google says it discloses information when needed to respond to legal process [5]. A browser call is not anonymous, whatever caller ID a free dialer shows.

Are VoIP calls encrypted?

Browser calls are encrypted in transit, because the WebRTC standard forbids unencrypted audio [1]. End-to-end encryption, where even the provider can't listen, exists only on app-to-app calls such as WhatsApp, Telegram, Discord and opt-in Google Meet calls between personal accounts [2][3][58][26]. A call that rings a phone number can't be end-to-end encrypted.

Is it safe to make browser calls on public Wi-Fi?

For the audio, yes: WebRTC encrypts the media between your browser and the service, so another person on a café network can't simply listen in [1], and browsers give microphone access only to HTTPS pages [19]. Public Wi-Fi doesn't change the rest: the service still keeps its call records, and emergency calls still depend on the service you use.

Can a website keep using my microphone after the call?

Not without your permission. The WebRTC standard requires explicit consent before a page uses the microphone [1]. In Chrome you can allow a site only this time, and a site can't start recording while you are in another tab or app [20]. Sites you allowed are listed under Privacy and security, then Site settings, where you can delete each one, so I clear old dialers now and then.

Is WhatsApp Web calling safe?

It is one of the most private browser options I checked: WhatsApp says web calls are end-to-end encrypted [56]. Its limits are reach and safety nets. It calls only WhatsApp users and link guests [32][12], needs an account registered with a mobile number, and its terms exclude emergency services [6]. WhatsApp announced browser calling on , and its help centre says it is still rolling out [57].

Can someone use my phone number to make calls?

On Google Voice, the known trick is the verification-code scam: a stranger gets a code texted to you, asks for it, and uses it to link a Voice number to your phone number [45]. Services that show your own number protect it with a check: TwinPhone shows only a rented number or one proven with a verification code [14], and Call2Friends verifies numbers by SMS [51]. Never share those codes.

Does a VPN make browser calls private?

Only partly. The IETF notes that WebRTC can discover your VPN's public address and, with a split-tunnel VPN, the internet provider's address beneath it [22]. A VPN also does nothing about what the calling service logs or the caller ID it shows. Some services restrict VPNs outright: TextNow's terms reserve the right to limit them [11].

Is it safe to give a calling website my phone number?

It depends on who runs it. Google Voice, WhatsApp and Telegram need a number to register [16][6][3], and Globfone also asks for a card check [44]. TwinPhone needs only an email or a Google account [17], and PopTox needs nothing for free calls [18]. I give a number only to an operator that names itself and says what it logs.

Do browser calling services record my calls?

The ones that address it say they don't record personal calls: TwinPhone states that personal calls are not recorded [14], and Call2Friends says it does not record or store call content [10]. Many other pages I read say nothing either way, and silence isn't a promise.

Ask an AI about this page

Each link opens the assistant in a new tab with this page's address in the question.

Sources

  1. RFC 8827: WebRTC Security Architecture · IETF (RFC Editor) · checked November 1, 2026
  2. About end-to-end encryption - WhatsApp Help Center · checked November 1, 2026
  3. Telegram FAQ · checked November 1, 2026
  4. Call From Your Browser Without a SIM Card - TwinPhone · checked November 1, 2026
  5. Privacy Policy – Privacy & Terms – Google · Google · checked November 1, 2026
  6. WhatsApp Terms of Service · checked November 1, 2026
  7. Can I call a phone from my browser for free? - TwinPhone Help Center · checked November 1, 2026
  8. Terms of Use - Yolla · checked November 1, 2026
  9. Call emergency services - Google Voice Help · checked November 1, 2026
  10. Private Policy | Call2Friends · checked November 1, 2026
  11. Terms of Use – TextNow · checked November 1, 2026
  12. Now You Can Invite Anyone to a WhatsApp Call: No Account Needed, No Cost, No Time Limit (WhatsApp Blog, October 14, 2026) · checked November 1, 2026
  13. Yolla: International Calling App · checked November 1, 2026
  14. What number does the person I call see? - TwinPhone Help Center · checked November 1, 2026
  15. About us | PopTox · checked November 1, 2026
  16. Protect your verification code - Google Voice Help · checked November 1, 2026
  17. Call a phone from your browser - TwinPhone · checked November 1, 2026
  18. Free International Calls | PopTox · checked November 1, 2026
  19. MediaDevices: getUserMedia() method - Web APIs | MDN · MDN Web Docs (Mozilla) · checked November 1, 2026
  20. Use your camera and microphone in Chrome - Computer - Google Chrome Help · Google · checked November 1, 2026
  21. WebRTC API - Web APIs | MDN · MDN Web Docs (Mozilla) · checked November 1, 2026
  22. RFC 8828: WebRTC IP Address Handling Requirements · IETF (RFC Editor) · checked November 1, 2026
  23. Voice call someone or a group on Messenger - Messenger Help Center (Computer) · checked November 1, 2026
  24. Make Phone Calls from Your PC, Laptop, or Browser - Yolla · checked November 1, 2026
  25. Google Meet Security & Privacy for users - Google Meet Help · checked November 1, 2026
  26. Learn about call & meeting encryption in Google Meet - Google Meet Help · checked November 1, 2026
  27. Free Internet Calls | Free Online Calls | PopTox · checked November 1, 2026
  28. Terms of Use | PopTox · checked November 1, 2026
  29. Set up Google Voice - Computer - Google Voice Help · checked November 1, 2026
  30. Privacy Policy | Globfone · checked November 1, 2026
  31. Microsoft Teams (free) · checked November 1, 2026
  32. How to make a 1:1 voice call (Web) - WhatsApp Help Center · checked November 1, 2026
  33. Make a call with Google Voice - Computer - Google Voice Help · checked November 1, 2026
  34. Learn about identity verification for Google Voice users - Google Voice Help · checked November 1, 2026
  35. FAQ - Yolla · checked November 1, 2026
  36. Affordable International Calling : No Contract or Credit Check - TextNow · checked November 1, 2026
  37. TextNow | Get Free Calling and Texting with TextNow (web login) · checked November 1, 2026
  38. Telegram Web A (login screen, observed) · checked November 1, 2026
  39. Use a phone for audio in a video meeting - Google Meet Help · checked November 1, 2026
  40. Learn what requirements you need to use Google Meet - Google Meet Help · checked November 1, 2026
  41. Skype is retiring in May 2025: What you need to know - Microsoft Support · checked November 1, 2026
  42. Free call | Call2Friends - Online call · checked November 1, 2026
  43. Terms of Use | Globfone · checked November 1, 2026
  44. How to Make Free Online Phone Calls From Your Browser | Globfone · checked November 1, 2026
  45. The Google Voice scam: How this verification code scam works and how to avoid it | Consumer Advice (FTC) · US Federal Trade Commission · checked November 1, 2026
  46. Turn on 2-Step Verification - Computer - Google Account Help · Google · checked November 1, 2026
  47. Manage your caller ID during calls - Computer - Google Voice Help · checked November 1, 2026
  48. The end of legacy Google Voice for personal accounts - Google Voice Help · checked November 1, 2026
  49. Terms and Conditions | Call2Friends · checked November 1, 2026
  50. Contact us | Call2Friends · checked November 1, 2026
  51. Caller ID | Call2Friends FAQ · checked November 1, 2026
  52. Managing account & Payments | Call2Friends FAQ · checked November 1, 2026
  53. Terms of Service | StartACall · checked November 1, 2026
  54. Terms and Conditions | HelloAirDial · checked November 1, 2026
  55. MySecondLine – Your Phone Line of Communication on Your Mobile Phone · checked November 1, 2026
  56. Introducing Web Calling on WhatsApp, Plus More New Updates (WhatsApp Blog, July 28, 2026) · checked November 1, 2026
  57. About WhatsApp Web calling - WhatsApp Help Center · checked November 1, 2026
  58. Every Voice and Video Call on Discord Is Now End-to-End Encrypted (May 18, 2026) · checked November 1, 2026