Domain privacy protection (also called WHOIS privacy) hides the personal contact details attached to your domain registration from the public WHOIS lookup database, replacing them with anonymized placeholder information instead. If you have never turned it on, your real name, email address, phone number, and physical address may be visible to anyone who looks up your domain.
What Is Public by Default
Every domain name has a registrant record on file: the owner's name, organization, email, phone number, and postal address. Under ICANN rules, most registries publish this information (or a limited version of it) in the WHOIS database, which anyone can search for free.
Without privacy protection turned on, that means:
- Your personal or business phone number and email are visible to anyone who searches your domain name.
- Spammers and telemarketers routinely scrape WHOIS records to build contact lists.
- Competitors or bad actors can find out exactly who owns a domain and how to reach them directly.
Why It Matters for .co.ke Domains Too
If your domain ends in .co.ke, it is registered under the Kenya Network Information Centre (KENIC) registry rather than a generic international registry, and the exact privacy rules and defaults can differ from a .com or .net domain. Some country-code extensions restrict or don't offer privacy protection at all, so what is available depends on the specific extension you hold. If you are not sure whether privacy protection applies to your domain, contact support to confirm before assuming it's covered.
How to Turn On Privacy Protection
- Log in to your ZIPROF client portal.
- Go to Domains, then My Domains.
- Click Manage Domain next to the domain you want to protect.
- Look for the Domain Privacy Protection (or ID Protection) option and toggle it on.
- Save your changes.
If you don't see this option for your specific domain extension, reach out to support. It may mean the registry for that extension doesn't support privacy protection, or that it needs to be enabled on the registry side rather than the account side.
Enabling or disabling privacy protection can take a few hours to reflect in public WHOIS lookup tools, since some of them cache older results. Don't be alarmed if your old details briefly still show up right after you make the change.
What Happens If You Leave It Off
Nothing breaks on your website or email if you skip privacy protection. It's purely about who can see your contact details attached to the domain record. Many business owners are comfortable leaving it off when the domain is registered to a company rather than a personal name and address. If your domain is registered under your personal details, though, turning privacy protection on is a simple way to cut down on spam calls and unsolicited emails tied directly to your domain ownership.
For a refresher on how domain registration works in general, see What Is a Domain Name and How Does It Work?