What Is WHOIS and Domain Privacy?

When you register a domain, your contact details are recorded — and that's where WHOIS comes in. So what is WHOIS? It's the public directory of domain registration information, the system anyone can query to see who is behind a domain and how to contact them. This guide explains what WHOIS shows, why it exists, and how domain privacy can shield your personal details from public view.

What WHOIS shows

A WHOIS lookup can reveal the registrant's name, organisation, email, phone number and address, along with the domain's registration and expiry dates and its nameservers. It was designed in the early internet so that people could find who was responsible for a domain — useful for resolving technical issues or legal matters. The dates and nameservers are genuinely handy; the personal contact details are the part most people would rather keep private.

Why WHOIS matters to you

Public contact details have a downside: they can be harvested by spammers, scammers and marketers. Many domain owners report a spike in junk email and dubious 'renewal' notices shortly after registering, precisely because their address sat in WHOIS for anyone to scrape. Knowing what's public lets you make an informed choice about protecting it.

How domain privacy helps

Domain privacy (sometimes called WHOIS privacy or privacy protection) replaces your personal details in the public record with the privacy service's information, while you remain the true owner. You still control the domain completely; the world just can't read your name, email and phone number. For individuals and small businesses run from home, this is a simple, valuable layer of protection.

• Keeps your personal name, email, phone and address out of the public record
• Cuts down on spam and scam 'renewal' messages
• Protects your home address if you run a business from home
• You stay the legal owner — only the public display changes

When you might not want privacy

Sometimes a degree of transparency is useful — a large, established business may want its organisation visible to look open and contactable, and a few extensions require certain details to be public. For most personal sites and small ventures, though, privacy is the sensible default. Note that some local extensions handle public data differently, so check what applies to the extension you choose.

Watch out for WHOIS-based scams

Because WHOIS exposes your email and your domain's expiry date, scammers use it to send convincing fake renewal notices timed to look urgent. Whether or not you use privacy, learn to recognise these — our guide on avoiding domain scams shows the tell-tale signs so you never pay the wrong party.

How to turn on domain privacy

Enabling privacy is usually simple — it's a setting on the domain in your dashboard, switched on either when you register or at any time afterwards. Once active, anyone running a WHOIS lookup sees the privacy service's details instead of yours, while your ownership and control stay exactly the same. There's nothing else to maintain; it quietly does its job in the background. For most individuals and small businesses, turning it on at registration is the sensible default and one fewer thing to think about later.

Privacy isn't a substitute for good security

Domain privacy hides your details, but it doesn't protect your account — so pair it with a strong, unique password and keep the email on your account secure, since whoever controls that email can often control the domain. Think of privacy as keeping your address off a public noticeboard, and account security as locking your front door. You want both. Together they keep your domain genuinely yours and out of the reach of opportunists.