Domain privacy and the add-ons at checkout

What it costs 6 min read

What domain privacy really hides, why the scam renewal letters keep coming anyway, and which of the extras on that checkout page are worth paying for.

You are renewing your domain and the page has six boxes ticked before you got there. Privacy protection. Ownership protection. Premium something. Each one has a small price next to it and a sentence designed to make unticking it feel careless.

Some of that list is useful, some of it you may already have for free, and some of it is there because people tick boxes when they are worried.

What domain privacy actually hides

Every domain has a registration record, and it is public by design. It was built to say who is responsible for a name and how to reach them: a name, a postal address, a phone number and an email address.

If you registered your domain from your kitchen table, the address on that record is probably your house. Domain privacy replaces those details in the public record with the privacy service's own, so a stranger looking your business up cannot read your home address off it.

The whole product is four lines hidden in a public directory. It changes nothing about how the domain works, who owns it, or what happens if you stop paying.

Check whether you already have it

Since the privacy rules changed a few years ago, most registrars now hide the personal details of individual owners in the public record by default, whether or not you pay for anything.

So before you buy it, look. Search for a WHOIS lookup or an ICANN lookup, type your domain in, and read what comes back. If you see your own home address, the record is open and privacy would do something. If you see redacted lines or the registrar's own contact details, you may already have the thing you are being asked to pay for.

A few domain endings require the owner's details to stay public and will not allow privacy at all. If you work from home, that is worth checking before you choose the name rather than after.

What it does not stop

It does not stop the calls and letters, because your address is also on your business registration, your Google listing, your invoices and the side of your truck. It does not hide you from a court order, a legal dispute over the name, or your registrar itself. It does not make your site more secure, because it has nothing to do with your site. And it does not stop anybody from seeing which registrar holds your name or when it expires, because those lines stay public either way.

The letters that look like bills

Every owner gets these eventually. An official-looking notice about a domain listing service, a search engine submission, or an expiry that is coming up, printed to look like an invoice with a due date on it.

They are not from your registrar. Some are a sales pitch for a service you do not need. Some are trying to get you to move your domain to them by making the renewal look overdue. Plenty of them are not legal. In the United States, post that is dressed up as a bill but is really a sales offer has to carry a notice saying so in as many words, and the Federal Trade Commission has shut down operations that mailed small businesses fake domain renewal invoices. You can report one to the FTC and to the Postal Inspection Service. What reporting will not do is stop the next one arriving.

The defense is knowing who your registrar is. Renew only by logging into that account yourself, never from a link or a payment slip that arrived in the mail. If a notice makes you nervous, log in and look at the real expiry date. That takes two minutes and settles it every time.

Two free settings worth more than the paid one

While you are in the account, there are two switches that do more for you than anything on the upsell list, and neither costs anything.

The first is the transfer lock, which tells the registry that the name may not be moved to another company until you deliberately unlock it. It is usually on by default. Check that it is, because it is the thing standing between a compromised email account and somebody walking off with your name.

The second is two-step login. Your domain account is the master key to your website, your email and everything that runs on your name. It deserves a stronger lock than a password you also used somewhere else. This is the single most useful five minutes on this page.

Then turn auto-renew on and make sure the card behind it is not one that expires next spring. A replaced card silently breaks auto-renew, which is one of the most common ways a working domain stops.

The extras you can usually skip

The rest of that checkout page is mostly things sold in the wrong place.

Premium DNS is sold as speed and reliability, and for a local business site it is solving a problem you do not have. Website builders and email marketing trials are there because the trial converts. Security bundles with serious names are frequently a certificate you already get free from your host, or a scanning service that emails you reports you will not read. Extra protection plans on top of the transfer lock are usually charging for a lock you already have.

None of it is a scam. It is being sold to you at the moment you are least equipped to judge it, which is why it is on that page.

Who should pay for privacy

If you run the business from your home, pay for it if your registrar does not already redact your details. Your home address is not something to publish in a directory anyone can query, and the cost is small.

If you work from a yard or a shop with a public address that is already on your listing, your invoices and your truck, privacy is buying you very little. You can turn it on for tidiness, but do not let anyone tell you it protects you, because the address they would find is already painted on your vehicle.

If money is tight this month, the honest ranking is: two-step login first, transfer lock second, auto-renew third, privacy fourth. The first three are free.

A short checklist

• Look your own domain up on a WHOIS lookup before buying privacy, and see what is actually showing
• Buy privacy if your home address is visible, and skip it if your address is already public everywhere else
• Turn on two-step login for the registrar account today
• Confirm the transfer lock is on
• Turn on auto-renew and check the card behind it has not been replaced
• Untick premium DNS, builders, marketing trials and protection bundles unless you know why you want them
• Write down which company holds your domain and keep it somewhere that is not your inbox
• Ignore renewal notices that arrive by post, log in to check the real date instead, and report the fake ones if you want to

Questions people ask

Is domain privacy worth paying for

If your home address would otherwise be public, yes, and it is cheap. If it is already public on your listing and your truck, it is close to decorative.

Will privacy stop the spam calls about my website

It reduces one source. Most of those calls come from your business listing and your public phone number, so they will carry on either way.

Does domain privacy hide who owns the domain from me

No. Your registrar account still shows your name, and you remain the owner. Privacy only changes what strangers see in the public record.

Can I turn privacy off later if I need to

Yes, and you sometimes have to, briefly, when moving a domain to another company.

Is a locked domain the same as domain privacy

No. Privacy hides your details. The lock stops the name being moved. The lock is the more important of the two and it does not usually cost anything.

What is the one thing I should do if I only do one

Turn on two-step login for the account that holds your domain. Everything else you own online sits underneath it.