Domain Names
What Is WHOIS Privacy Protection? How It Works in 4 Simple Steps
When you register a domain, the registrar must collect your name, address, email, and phone number. WHOIS privacy protection keeps those details out of the public domain record, so the world sees a privacy service instead of you.
This guide explains how WHOIS privacy works, exactly what it hides, when it can’t be used, and how to decide whether you need it. To see why public records are risky in the first place, read WHOIS Database: 10 Dangers of Public Domain Records.
Good to know: WHOIS privacy is also called ID protection, private registration, or domain privacy. They all describe the same service. Run a free WHOIS lookup →
The quick answer
WHOIS privacy protection replaces your personal contact details in the public domain record with the details of a privacy service. You stay the legal owner of the domain, and messages sent to the privacy email address are forwarded to you.
How WHOIS privacy protection works
Privacy protection works quietly in the background. Here’s what happens from the moment you register a domain:
1. You register a domain
You give your registrar your real contact details, as ICANN rules require.
2. Your details stay on file
The registrar keeps your real information privately, so you remain the verified owner.
3. Proxy details go public
The public record shows the privacy service’s name, address, and email instead of yours.
4. Messages reach you
Email sent to the privacy address is forwarded to you, so legitimate contacts can still reach you.
What it hides and what stays public
Hidden with privacy turned on
- Your name and organization
- Your mailing address
- Your email address
- Your phone number
Still public with privacy turned on
- The domain’s creation and expiration dates
- Your registrar’s name
- Your nameservers
- The domain’s status codes, such as whether it is locked
These details stay public because the domain system needs them to work. You can see exactly what any domain shows with our WHOIS lookup or the official ICANN Lookup tool.
WHOIS privacy vs. GDPR redaction
Since the GDPR took effect in 2018, many registrars hide some personal fields automatically. That’s helpful, but it isn’t the same as a privacy service.
GDPR redaction
Each registrar decides what to hide, and rules differ by domain extension. Some fields may still appear, and you don’t control what is shown.
WHOIS privacy protection
A dedicated service replaces your contact details with proxy details for every field it covers, and gives you a forwarding email address. The protection stays in place even if redaction rules change.
Tip: most WHOIS lookups now run on the newer RDAP system. The name changed, but the same kind of registration data can still be public.
Do you really need WHOIS privacy?
For most people, yes. It’s especially important if any of these describe you:
- You registered the domain with your home address or personal phone number
- You run a small business, freelance, or work from home
- You want fewer spam emails, robocalls, and scam letters
- You’re preparing a launch and don’t want competitors to see your new domains
- You run a personal blog or portfolio and value your privacy
When you might skip it
A larger company with a public office address and a general contact email may be comfortable with a public record. Even then, privacy can reduce spam aimed at the people listed.
Domains that can’t use WHOIS privacy
Privacy depends on the rules of each domain registry, so it isn’t available everywhere.
- .us domains: the .us registry does not allow privacy or proxy services
- Some country‑code domains: certain ccTLDs have their own rules, and some hide personal details by default
- Restricted or regulated extensions: some registries require public, verified contact details
Important: if privacy isn’t available for the extension you want, consider registering a business address and a dedicated email address instead of personal ones.
When privacy can be removed
WHOIS privacy protects legitimate owners. It is not a shield for abuse. Privacy may be turned off, or your details shared with authorities, if:
- ICANN, the registry, or a court requires it
- There is a domain dispute, such as a UDRP case
- Spam, phishing, malware, or fraud is reported and verified
- You ask for privacy to be removed
You must also keep your real contact details accurate behind the scenes. Read the full terms in our WHOIS Privacy Disclosure.
WHOIS privacy and domain transfers
Privacy doesn’t stop you from moving your domain, but a little preparation avoids delays:
- Make sure the email address on your account is current, because transfer approvals are sent there
- Unlock the domain and get the authorization (EPP) code from your current registrar
- Check whether your current registrar asks you to turn off privacy during the transfer
- Turn privacy back on as soon as the transfer completes
See our Domain Transfer Policy for the full process.
How to check if your domain is protected
Run a WHOIS lookup on your domain. If you see “Redacted for Privacy” or the name of a privacy service instead of your own details, you’re protected. If you see your name, address, or phone number, it’s time to turn privacy on.
Check Your DomainFrequently asked questions
Is WHOIS privacy protection legal?
Yes. It’s a standard service offered by registrars under ICANN rules. You still provide accurate details to your registrar, and those can be shared when the law requires it.
Do I still own my domain with privacy turned on?
Yes. You remain the legal owner. The privacy service only replaces what the public record shows.
Can people still contact me?
Yes. Messages sent to the privacy email address are forwarded to you, so customers and legitimate contacts can still reach you.
Does WHOIS privacy stop all spam?
It greatly reduces spam that comes from public records. It can’t stop spam aimed at email addresses you publish on your website.
Can I add privacy to a domain I already own?
Yes. You can usually turn it on at any time. Older copies of your record may still exist in WHOIS archives, so it’s best to turn it on when you register.
Does WHOIS privacy affect SEO?
No. Search engines don’t rank sites lower because the domain uses privacy protection.
Need help protecting your domain?
We’re happy to help you check your domain record and keep your details private.
Contact Us