What Is WHOIS Privacy, and Should You Have It On?

Last week we covered why the name on your domain registration matters. This week: who gets to see it.

When you register a domain, the contact information you provide — name, mailing address, phone number, email — becomes part of the domain's official record. Historically, that entire record was published in a public directory called WHOIS, searchable by anyone, for every domain on the internet. Register a domain from your kitchen table, and your kitchen table's address went online with it.

WHOIS privacy is the service that stops this. It's sometimes called domain privacy or privacy protection, and understanding it takes about three minutes.

How it works

With privacy enabled, the public record shows a proxy: instead of your name and home address, lookups return the details of a privacy service, typically with a forwarding email address that relays legitimate messages to you. You remain the actual registrant — ownership doesn't change, and the registrar knows exactly who you are. What changes is what the public sees.

Think of it like an unlisted phone number. The phone still works, calls still reach you, but your details aren't in the book.

Two developments have improved the situation in recent years. Privacy regulations, particularly in Europe, forced much of the WHOIS system to redact personal data by default. And most reputable registrars now include privacy protection free, where it was once a paid upsell. But neither of these is universal — coverage varies by registrar, by TLD, and by where you live — which is why the setting is still worth checking rather than assuming.

What happens without it

An exposed WHOIS record is a small, steady cost rather than a dramatic one. The most immediate consequence is spam: newly registered domains get scraped within days, and the contact details attached to them feed marketing lists, cold-call operations, and a well-known genre of scam mail — official-looking "renewal notices" from companies you've never done business with, hoping you'll pay them instead of your actual registrar.

For anyone working from home — which describes most freelancers and many small businesses — there's a more personal dimension. Your domain record can be the link between your public business name and your private home address. Anyone who can type your domain into a lookup tool can find where you live. For most people that's an uncomfortable abstraction; for anyone with a difficult ex-client, an online audience, or any reason to keep home and work separate, it's a concrete problem.

When you might turn it off

There are a few legitimate reasons to run a public record. Some organizations want their registration transparently tied to their legal entity — it can help with certain verification processes, and some businesses simply prefer it. If you're selling a domain, a public record lets buyers reach you. And a handful of country-code TLDs restrict or disallow privacy services entirely, so the choice is occasionally made for you.

For a typical small business or freelancer, though, none of these outweigh the default: privacy on. There is no meaningful downside for ordinary operation — your email delivers the same, your website loads the same, and legitimate correspondence still reaches you through the relay.

The checklist

Three things to verify with whichever registrar holds your domain. First, that privacy protection exists for your TLD and is actually enabled — look up your own domain and see what comes back. Second, that it's included rather than billed as an add-on; a privacy fee that appears at renewal is one of the quiet upsells we covered in the renewal-pricing post. Third, that the contact details underneath the privacy layer are current, because that's where your renewal and transfer notices go.

At Mail Minted, privacy protection is enabled by default on every domain we register, at no charge, with a toggle in your portal if you ever have a reason to go public. We treat it as the correct default rather than a product — your home address becoming public record shouldn't be the price of starting a business.

---

Next week: how to choose a domain name that still works in five years — the naming decisions that age well, and the clever ones that don't.