What is Domain Privacy?
Also known as: WHOIS Privacy
An optional service that replaces the domain registrant's personal contact information in WHOIS records with the registrar's proxy details to shield the owner from spam and unwanted disclosure.
Domain privacy, also called WHOIS privacy, is a service offered by domain registrars that hides the personal contact information of a domain registrant from the public WHOIS database. Under ICANN rules, every domain registrant must provide accurate name, address, phone number, and email, and these details are typically published in the WHOIS record. Domain privacy substitutes that data with the registrar's own contact details or those of a proxy service, so the registrant's real identity is not directly exposed.
The service works by making the registrar the registrant of record for WHOIS purposes, while a separate, private agreement between the registrant and the registrar preserves the registrant's legal ownership and control over the domain. Queries to WHOIS return the registrar's generic contact information. When someone wants to reach the domain owner, they can send a message through the registrar, which then forwards it to the registrant without revealing their actual email address or postal address. Most registrars charge a small annual fee for this service, but some include it for free with domain registration. Domain privacy can also protect against domain theft by making it harder for attackers to craft social engineering attacks using the owner's publicly available details.
Domain privacy is not absolute. Law enforcement, intellectual property plaintiffs, or parties involved in a UDRP dispute can still subpoena the registrar to obtain the real registrant data. Additionally, some new generic top-level domains (gTLDs) have restricted WHOIS access by design, reducing the need for privacy services. For most private individuals and small businesses, domain privacy provides a meaningful layer of anonymity without interfering with the domain's normal operation or DNS resolution.
Key facts
- Domain privacy replaces a registrant's personal WHOIS data with the registrar's proxy information.
- ICANN requires accurate contact data for domain registration, but privacy services hide it.
- Most services allow third parties to contact the registrant via an anonymous relay provided by the registrar.
- Domain privacy does not protect registrants from lawful requests such as subpoenas or UDRP complaints.
- The service is typically optional and may be bundled for free or offered as a paid add-on per domain.
How it works in practice
Related terms
References
More in Domains
Auth Code
A unique, per-domain secret code that the losing (current) registrar must provide so the gaining (new) registrar can authorize a domain transfer.
ccTLD
A ccTLD is a two-letter top-level domain assigned to a country or territory based on the ISO 3166-1 alpha-2 code, such as .us for the United States or .jp for Japan.
Domain Lock
A registrar-level status that prevents unauthorized domain transfers, modifications, or deletions until the registrant explicitly removes the lock.
EPP
EPP (Extensible Provisioning Protocol) is an XML-based application protocol used by domain name registries and registrars to provision domain names, manage contacts, and transfer registrations.
Grace Period
The grace period is a window after a domain expires during which the registrant can renew at the standard renewal fee, without incurring additional redemption costs.
IDN
An Internationalized Domain Name (IDN) is a domain name that includes characters outside the ASCII set, encoded as Punycode for compatibility with the DNS.
Punycode
Punycode is a method defined in RFC 3492 for converting Unicode strings into ASCII labels, enabling Internationalized Domain Names (IDNs) to be used in the DNS.
RDAP
RDAP (Registration Data Access Protocol) is a modern RESTful protocol for querying domain name and IP address registration data, replacing the older WHOIS protocol with structured JSON responses and role-based access controls.
Registrant
The registrant is the legal holder of a domain name, listed as the owner in the registry database and responsible for the domain's renewal and administration.
Registrar
A domain registrar is an ICANN-accredited company that sells domain name registrations to individuals and organizations, managing the reservation of domain names within the DNS.