What is WHOIS privacy, and do you need it?

When you register a domain, ICANN requires you to provide real contact details — and historically those details were published, in full, in a public database anyone could query. WHOIS privacy is the service that shields them. Here's what it is and whether you need it.

What WHOIS is

WHOIS is a public directory of domain registration information. For any domain, a WHOIS lookup could traditionally return the registrant's name, postal address, email and phone number, plus registration and expiry dates. It exists so that domain ownership is accountable and contactable.

You can query it yourself:

whois example.com

The problem it creates

Publishing your personal details to a globally searchable database has obvious downsides:

• Spam. Automated scrapers harvest WHOIS emails and phone numbers relentlessly.
• Scams. "Your domain is expiring" phishing often targets addresses pulled from WHOIS.
• Privacy. If you registered a domain personally, your home address and phone could be exposed to anyone.
• Unwanted contact. Competitors, marketers and cold-callers all mine WHOIS data.

What WHOIS privacy does

WHOIS privacy (also called domain privacy or ID protection) replaces your personal details in the public record with the registrar's proxy information. Your name and address are hidden; a forwarding email or a contact form stands in. You remain the legal owner — only the *public display* changes. Messages sent to the proxy can be forwarded to you, so you're still reachable without being exposed.

The GDPR shift

Since privacy regulations like the EU's GDPR came into force, registrars redact much personal data from public WHOIS by default, especially for individuals. That's raised the baseline of privacy considerably. But behaviour still varies by TLD and registrar, and a dedicated privacy service gives you consistent, deliberate protection rather than relying on defaults.

Do you need it?

For most people, yes — and since good registrars include it free, there's rarely a reason to skip it. Enable it when:

• You registered the domain as an individual and don't want your home details public.
• You want to cut down on spam and scam calls.
• You're a small business run from a home address.

You might *not* need it when:

• Some organisations and government entities are required to show public contact details.
• A few TLDs don't permit privacy protection, or your transparency policy calls for public info.

Privacy isn't invisibility

One important caveat: WHOIS privacy hides your details from casual public lookups, not from lawful processes. Registrars must still identify owners to authorities where legally required, and privacy doesn't shield illegal activity. It's a spam-and-exposure shield, not a cloak of anonymity.

How to turn it on

In your registrar's control panel, WHOIS privacy is usually a single toggle on each domain. On a good registrar it's free and can be switched on at registration or any time after. If yours charges extra for it, that's a sign to look at the renewal pricing and add-on policy more closely — or to transfer the domain somewhere fairer.

With Nxeon, domains are registered through name.com with privacy protection available, so your personal details stay off the public record by default. Enable it at checkout and your contact information stays yours.