What is WHOIS Privacy? Everything You Need to Know About It

WHOIS is the public record of who registered a domain name. Every domain has one, and anyone can look it up for free.

What it shows about you has changed a great deal since 2018, and most of the advice still circulating online predates that change. For a UK individual registering a .uk domain, your address is probably not published at all, and you can keep it that way for free. The detail is below.

What is WHOIS?

WHOIS is a lookup service, going back to the early 1980s, that answers one question: who is responsible for this domain? When you register a domain you have to give real contact details to the registrar, and historically all of them went straight into a public database that anyone could query.

It still exists because it is useful. It is how you find out whether a domain is taken, who to approach about buying one, when a registration expires, and who to contact when a domain is being used for something it should not be.

The protocol itself is gradually being replaced by RDAP, which does the same job with a modern, structured response and proper access control. Most lookup tools now use RDAP underneath and still call it WHOIS.

What a WHOIS lookup actually shows

For most domains today you will see:

• The registrar the domain is with, and the date it was registered and expires.
• The nameservers, which tell you which hosting company or DNS provider it points at.
• The domain status codes, which show whether it is locked against transfer.
• A contact method, usually a forwarding form or an anonymised email address rather than a person.

What you will usually not see is the registrant's name, postal address or phone number. That is the 2018 change, and it is the part most articles on this subject have never been updated for.

What changed in 2018

GDPR came into force in May 2018, and publishing the home address of every domain owner in a worldwide public database stopped being defensible. ICANN brought in a temporary specification that redacted registrant contact details for generic domains such as .com and .org, and that redaction has been the default ever since.

So for a .com registered today, a public lookup typically returns the registrar, the dates and the nameservers, with the registrant shown as redacted. The data still exists, and law enforcement and trademark holders can request it through a formal process, but it is no longer sitting on an open web page.

Can you opt out of WHOIS?

For .uk domains, yes, and this is where a lot of the advice online is simply wrong for a British reader.

Nominet, the .uk registry, lets individuals opt out of having their address published in the WHOIS, provided the domain is not being used for business or trade. Nominet calls this the WHOIS opt out. It is free, it is a setting on your registration rather than a product, and you can change it through whoever your domain is registered with. If you run a business through the domain, the opt-out does not apply to you, and that is a condition of the policy rather than something a registrar can waive.

For .com, .net, .org and the rest, there is no opt-out to request, because the redaction described above already happens by default. What remains available is a privacy service, covered next.

What is WHOIS privacy, and do you need it?

A WHOIS privacy service, sometimes sold as domain privacy or ID protection, replaces your details in the public record with the details of a proxy company that forwards anything genuine on to you. Some registrars include it, some charge a few pounds a year for it, and for some domain extensions it is not permitted at all.

Whether it is worth paying for depends on what you are registering:

• A .uk domain as an individual. Probably not. The Nominet opt-out covers you and costs nothing.
• A .com as an individual. Probably not. Redaction is already the default, so check a lookup before you buy anything.
• A domain registered to a company. Company details are on the public register at Companies House anyway, so the privacy gain is limited. The usual reason to want it is to keep a specific project separate from a named director.

One thing to know before you buy: privacy services do not hide the nameservers or the registration dates, and they are lifted if a domain is subject to a legal dispute. They keep your address off a scraped mailing list. They are not anonymity.

Never register a domain with false details

It is worth being blunt about this, because it gets suggested a lot. Giving a fake name or address to avoid publication breaches your registrar agreement and ICANN's accuracy requirements, and a domain found to have deliberately false contact data can be suspended or cancelled. Registrars also send verification emails to the address on file, and an unverified address will suspend the domain by itself after fifteen days.

If you have a domain sitting on an old address or a dead mailbox, that is worth fixing today rather than at renewal.

How to check what your domain shows

Look it up and see. ICANN runs a lookup at lookup.icann.org for generic domains, and Nominet has its own at nominet.uk for .uk. Both are free and neither asks you to sign up.

If the result shows an address you would rather it did not, the fix depends on the extension: apply the Nominet opt-out for .uk, or ask your registrar about a privacy service for anything else. If you host with us and you are not sure what your domain is showing or where it is registered, ask our team and we will look at it with you.

WHOIS FAQs

Is WHOIS free to use?

Yes. Every registry runs a free lookup, and so do most registrars. Paid services exist, but they sell history and monitoring rather than access.

Can I find out who owns a website?

Sometimes. You can always see the registrar, the dates and the nameservers. Whether you see a person depends on the extension and on whether privacy or an opt-out applies, and for most domains registered since 2018 you will not.

Does WHOIS privacy affect SEO?

No. It is not a ranking signal, and Google has said so repeatedly. A privacy service will not hurt a site's search performance.

Will hiding my details stop domain spam?

It reduces it. The renewal scam letters that arrive on paper are generated from public registration data, so taking your address out of that data stops most of them. Anything already scraped before you made the change is still out there.