WHOIS privacy, what it hides and what it does not

WHOIS privacy replaces your personal contact details in the public WHOIS/RDAP record with the details of a forwarding service, so casual lookups see the proxy instead of your name, address, phone, and email. It hides your public-facing registration data from scrapers and strangers. It does not make you anonymous to your registrar, to law enforcement, or to anyone who can subpoena the records, and it has no effect on your DNS, IP address, or search rankings.

What WHOIS is

Every registered domain has a registration record that historically was queried through the WHOIS protocol and is now increasingly served through RDAP (Registration Data Access Protocol). The record ties a domain to a registrant, an administrative contact, a technical contact, and the authoritative name servers. When you enable WHOIS privacy (also called domain privacy or a privacy proxy), the registrar substitutes a proxy contact in the fields that would otherwise expose you.

What WHOIS privacy hides

• Your registrant name and any organization name.
• Your postal address.
• Your phone number.
• Your email address, usually replaced by a forwarding alias so messages still reach you.

The practical benefit is footprint control. Spammers, data brokers, and social engineers routinely scrape WHOIS data. Masking those fields cuts down on junk mail, cold calls, and phishing that references your real domain details.

What WHOIS privacy does not hide

• The domain name and its status. The domain, its creation and expiry dates, and its registrar remain public.
• Your name servers. The delegated NS records are part of the public record.
• Your DNS records and IP address. Anyone can resolve your A, AAAA, MX, and TXT records and see the IP your site answers on. Privacy is a registration-layer feature, not a network-layer one.
• Your identity from the registrar. Your real details are still on file. They can be released under a valid legal request, a UDRP dispute, or an ICANN transfer or complaint process.
• Content you publish. An SSL certificate, an email header, an about page, or an image EXIF field can still reveal who you are.

How to enable it in cPanel or at your registrar

WHOIS privacy is set where the domain is registered, not in your hosting account, so the exact screen depends on your registrar. A typical flow looks like this.

1. Log in to the account that manages the domain registration.
2. Open the Domains area and select the domain you want to protect.
3. Find the setting labeled WHOIS Privacy, Domain Privacy, or ID Protection.
4. Toggle it on and save. The public record updates within minutes to a day.
5. Confirm the change with a public lookup or RDAP query for your domain and check that the contact fields show the proxy.

Note that some country-code TLDs restrict or forbid privacy, and a few registries publish a redacted record by default regardless of the privacy toggle.

Privacy, transfers, and SEO

Keep the forwarding email working, because transfer authorizations and renewal notices are sent to the registrant contact. If you plan a domain transfer, some registrars ask you to lift privacy briefly so the gaining registrar can verify the contact, then you can re-enable it. Privacy has no bearing on rankings; Google indexes content and links, not WHOIS fields. What actually shapes your technical SEO footprint is your DNS and IP layout, which is where a dedicated Class C IP matters. For registration and privacy questions specific to your domains, see our domains FAQ or contact us.

For the policy rules that govern how registration data is disclosed during a transfer, review the ICANN Transfer Policy.