Domain Privacy
Private WHOIS Doesn’t Mean Fake: How to Verify a Privately Registered Website
A redacted registrant record tells you how a domain was registered, not who runs the business. Here is what to check instead.
Section 01 · Domain Privacy
Domain privacy that limits exposure, not accountability
Domain privacy used to mean paying a registrar a few dollars a year to keep your home address out of WHOIS. For most generic domains that fight is over. Personal registrant data is redacted by default, and a public lookup shows the registrar, the dates and the status codes rather than the person.
That shifts the questions worth asking. Which email does your registrar use to reach you, and would you notice if it bounced? Does turning on a paid privacy add-on change anything your registrar wasn't already doing? Who can still request your details, and through what process?
This section covers those decisions for bloggers, small businesses, agencies and anyone holding domains they care about. The position we take is consistent: privacy should cut unnecessary exposure, but it shouldn't make a domain owner unreachable when there's abuse, a dispute or a lawful request. Expect practical checks, plain explanations of policy, and the occasional reminder that a redacted record proves nothing about a site's honesty, good or bad. Coming up: the most common domain privacy mistakes, and where beginners should start.
Articles in Domain Privacy
Abuse and takedown reporting from Krebs on Security
- Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters InvestigationKrebs on Security
- U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon ExtortionsKrebs on Security
- Data Broker Radaris Loses Domains in Privacy FightKrebs on Security
- Microsoft Plugs Nearly 1,000 Security HolesKrebs on Security
- FBI Probes Service Selling 153M+ Drivers LicensesKrebs on Security
- Two Alleged ‘TeamPCP’ Hackers Arrested in AustraliaKrebs on Security
Ownership Question
Domain privacy questions
What should I know before getting into domain privacy?
Start with what your registrar already does. For most generic domains, personal registrant data is redacted by default, so a paid privacy add-on may change less than the checkout page suggests. Check which email address the registrar uses to reach you, because a dead contact address can cost you a renewal notice or a transfer approval. Privacy limits public exposure, but it doesn't stop lawful requests or abuse reports.
How much does domain privacy cost in United States, Canada, United Kingdom, Australia, Europe, South Carolina, global English-speaking website owners and domain registrants?
Many registrars now include privacy at no extra charge for generic domains like .com, while others still sell it as a yearly add-on. Country-code domains follow their own rules: .us does not allow privacy or proxy registration at all, and CIRA, which runs .ca, already withholds individual registrants' details. Your extension and registrar matter more than where you live, so check both before paying for a feature you may already have.
Related sections: WHOIS · Privacy Services · All articles in Behind The Domain