Buy from a seller that verifies age before payment and uses a third-party ID check for any product that may contain THC or is sold for inhalation. For most U.S. buyers, that means 21 and older for recreational cannabis and vaping products, 18 and older for some medical cannabis programs, and a store policy of 18+ or 21+ for CBD. A checkbox that asks if you are 21 is not age verification. Ask how the seller checks ID, what it stores, and whether delivery requires a signature and ID at handoff.
What cannabis age verification rules cover
There is no single national age rule for all cannabis and hemp products. Federal law sets 21 as the minimum age for tobacco products, including e-cigarettes and vaping devices. The 2018 Farm Bill made hemp with 0.3% THC or less a legal agricultural product, but it did not create a national age minimum for hemp-derived CBD. States set their own rules for medical and recreational cannabis, and some states add age limits or labeling rules for hemp products. A seller may also set a higher age limit as a company policy or to satisfy payment processors.
age verification rules for buying cannabis
That split matters when you buy online. A CBD tincture with no THC may face fewer age checks than a full-spectrum product, a vape cartridge, or a product sold in a state with strict hemp laws. The seller should tell you which rule applies before checkout, not after your card is charged.
cannabis age verification standards
What to look for before you buy
- Age verification happens before payment or at delivery, not after the order ships.
- The seller asks for a government-issued photo ID with a birth date and expiration date.
- The check uses a third-party service that authenticates the ID document, not just a birth year entry field.
- The privacy policy states how ID images are stored, how long they are kept, and how they are deleted.
- Delivery requires an adult signature and an ID check at the door for cannabis, vaping, or high-THC products.
- Product pages list THC content, batch lab reports, and any state age limit that applies.
- Customer service can explain the age rule for your state and product type in plain language.
Parameter bands to expect
Use these bands as a starting point, then confirm the rule for your state and product.
- 21 and older: Recreational cannabis in states with adult-use programs, plus tobacco and vaping products under federal law.
- 18 and older: Some state medical cannabis programs. Caregiver, minor, and patient registry rules vary by state.
- 18+ or 21+: Common retailer policy for CBD and hemp products, even where state law does not set a minimum age.
- 0.3% THC: The federal threshold for hemp. This is a product compliance line, not an age rule.
- Adult signature delivery: A common requirement for cannabis, alcohol, and some vaping products. The carrier checks ID at handoff.
How a strong age check works
A strong online check starts with a government ID scan or a verified identity service. The service checks the document format, birth date, expiration date, and sometimes a selfie or public records match. The seller should not ask you to email a photo of your ID. For delivery, the driver should scan or inspect the ID at the door and confirm the name and birth date. The order should not be left with a minor or dropped without a signature when the product requires adult delivery.
Data handling matters too. A seller that collects ID images should encrypt them in transit and at rest, limit access to staff who need it, and delete the images after the legal or business need ends. Ask for the retention period if the policy does not state it.
Pitfalls that signal weak compliance
- A single checkbox or a birth year dropdown with no ID check.
- No state selection at checkout, even though the seller ships across state lines.
- No adult signature option for delivery of cannabis or vaping products.
- ID images requested by email or text message.
- No lab reports or batch numbers on product pages.
- Claims that a CBD product is FDA approved. FDA has not approved CBD as a dietary supplement or food ingredient.
- A return policy that does not explain what happens if delivery fails because no adult is present.
State rules and product type change the answer
Medical cannabis states often set different ages and registry requirements than adult-use states. Some states allow 18 and older patients with a medical card, while adult-use sales stay at 21. Hemp laws add another layer. A state may ban certain hemp-derived products, require child-resistant packaging, or set an age limit for products with detectable THC. If you buy from a seller in another state, both the seller's state rules and your state rules can apply. Check your state health department, agriculture department, or cannabis regulator for the current rule.
FAQ
Is 18 or 21 the age for CBD?
Federal law does not set a national minimum age for hemp-derived CBD. Many retailers set 18+ or 21+. Some states set their own limits. Check the seller's policy and your state rules.
Does an online CBD store have to verify my age?
Not always under federal law for hemp CBD alone, but many sellers verify to meet state law, payment processor rules, and company policy. For products that contain THC or are sold as inhalables, expect a check.
What ID is accepted?
Usually a state driver's license, state ID, passport, or military ID. An expired ID should fail the check.
Is it safe to upload my ID?
Only if the seller uses a third-party verification service with encryption and a stated retention policy. Avoid sending ID images by email.
Why does delivery need a signature?
An adult signature and ID check at handoff prevent underage receipt and create a record of compliance. If a seller ships cannabis or vaping products without that step, ask why.
These rules change. Confirm the current age limit and ID requirement with your state regulator before you buy.