Security 2 min read · Updated
What Is WHOIS Privacy and Why Your Domain Needs It
WHOIS publishes your name, address, email and phone publicly. Here is what WHOIS privacy protection does and why it matters.
When you register a domain, your contact details are recorded in a public directory called WHOIS. Without protection, anyone in the world can look them up. Here is what that means and why WHOIS privacy matters.
What WHOIS exposes
By default, the WHOIS record for your domain can publish your:
- Full name
- Postal address
- Email address
- Phone number
That information is queryable by anyone — including spammers, scammers, and data brokers.
Since 2018 many registries and registrars redact personal data from public lookups by default (largely because of the GDPR), and the old WHOIS protocol is being replaced by RDAP. Redaction is not universal, though — it depends on the extension, the registry and the registrar — so privacy protection is still worth switching on.
What WHOIS privacy protection does
WHOIS privacy (also called ID Protection) replaces your personal details in the public record with the privacy service's proxy details. Your domain still works exactly the same; your identity is just hidden from public lookups. Legitimate requests are forwarded to you, so you do not miss anything important.
Why it matters
- Less spam: harvesters can't scrape your email and phone.
- Privacy & safety: your home or office address stays private.
- Fewer scams: blocks fake "domain renewal" and transfer-scam attempts.
Is it safe and legal?
Yes. WHOIS privacy is fully legitimate and widely used. You remain the legal owner of the domain — only the public display of your data changes. Authorities can still reach the registrar through proper legal channels if ever needed.
When it is not available
A few country-code extensions (and some registries) restrict or disallow privacy due to local rules. For the vast majority of domains — .com, .net, .org, .online, and more — privacy is available and often included free.