What is Domain Privacy?
Domain privacy (also called WHOIS privacy) is a registrar service that hides a domain owner’s name, postal address, phone number, and email in public WHOIS and RDAP lookup results. The registrar lists a privacy or proxy service’s forwarding contact details instead, so the owner stays reachable without exposing personal information to spammers and scammers.
More About Domain Privacy
Domain privacy swaps the contact details in your domain’s public record for a forwarding service’s details, so a lookup shows the service instead of you. Registrars still collect the real data: to complete a registration, applicants must provide their name, postal address, phone number, and email address to their registrar, and those details become the domain’s domain contacts.
The Internet Corporation for Assigned Names and Numbers (ICANN) once required that information to be published in WHOIS lookup results. That changed: under ICANN’s Registration Data Policy (in effect since August 21, 2025, building on rules in place since 2018), registrars must withhold most personal data from public lookup results, and ICANN retired the WHOIS service for generic TLDs on January 28, 2025 in favor of its successor, RDAP. These rules cover generic TLDs like .com; country-code TLDs set their own.
Anyone can still look up a domain and try to reach its owner about buying it, but public results now hide most personal data by default. Would-be buyers usually go through an anonymized relay email or the registrar’s contact form, and nonpublic data requires a formal disclosure request.
So what does domain privacy add? Instead of your details, registrars publish the contact information of a privacy or proxy service. With a privacy service, you stay the listed owner and the service’s forwarding contact details appear in place of yours. With a proxy service, the provider becomes the listed registrant and licenses the domain back to you. Either way, messages sent to the forwarding address are relayed to you. That reduces public exposure of your contact details and can mean fewer unsolicited calls, spam emails, and targeted phishing attempts.
What a privacy-protected record shows
DreamHost’s free Domain Privacy Protection shows the swap side by side:
- Without privacy: the public record shows the owner’s real details. DreamHost’s sample record lists the name John Smith, a street address, a personal email address, and the phone number 555-123-4567.
- With privacy: the registrant appears as Proxy Protection, LLC, at 417 Associated Rd. #324, Brea, CA 92821, with a proxy email address and the phone number 714-706-4182.
Email sent to the proxy address is automatically (and silently) forwarded to your real inbox, which stays secret. Unwanted callers reach an automated recording that points them to the proxy email. You stay reachable; your data stays private.
Why domain privacy still matters after redaction
Since Europe’s GDPR took effect in 2018, registrars have redacted most personal data from public gTLD lookup results by default, first under ICANN’s Temporary Specification and now under the Registration Data Policy, effective August 21, 2025 and revised May 12, 2026. Nonpublic data is released only through formal disclosure requests, such as ICANN’s Registration Data Request Service (RDRS), which serves requestors with a legitimate interest like law enforcement.
A privacy service still earns its place, in two ways. It publishes a working forwarding contact, so buyers and other legitimate parties can reach you without ever seeing your real inbox. And it masks your details consistently, including where redaction rules don’t reach.
TLDs that don’t allow privacy
Some registries prohibit privacy and proxy services outright. The .us registry is the clearest example: its administrator states that its contract with the U.S. Department of Commerce “does not allow for the provision of privacy services,” and .us registrant contact data is required to be publicly available. A proposal to allow privacy services for .us has been under discussion since 2021, so check the registry’s current policy before you register a .us name. Country-code TLDs generally set their own rules; confirm the TLD’s policy before you assume privacy is available.
What domain privacy costs
Pricing follows one of two models: some registrars include privacy protection with the domain at no added cost, while others bill it as a recurring per-domain fee on top of the registration. Renewal terms can differ from the first-year price, so check both the initial and renewal charges on your registrar’s current pricing page before you buy. DreamHost includes Domain Privacy Protection free, including on domains you transfer in.
Our blog’s Private Domain Registration FAQs answers the most common questions in more depth.
Frequently Asked Questions
Does domain privacy hide my identity from everyone?
No. Your registrar or privacy service still holds your real contact details and must disclose them for lawful requests, including urgent law-enforcement requests under ICANN's Registration Data Policy. Courts and domain disputes can also unmask you. Domain privacy reduces spam and casual lookups; it isn't anonymity.
How do I turn on domain privacy?
It's a registrar setting. Choose it when you first register the domain, or toggle it later in your registrar's control panel. At DreamHost, it's applied free as Domain Privacy Protection.
Does domain privacy make it harder to sell a domain?
It can. With privacy on, would-be buyers can't reach you through the public record. Route offers through the proxy email, a marketplace, or a domain broker, or lift privacy while a sale is active.
Is domain privacy the same as WHOIS privacy or private registration?
Yes. Domain privacy, WHOIS privacy, and private registration all name the same registrar service; DreamHost calls its version Domain Privacy Protection. The "domain protection" bundles some registrars sell go further, typically adding transfer locks and other controls on top of privacy.
