Across the United States, the short answer is this: buying cannabis for adult use at a licensed retailer requires you to be 21 or older and to show a government issued photo ID. Registered medical cannabis patients are usually held to 18, though some states keep the floor at 21 or require a parent or caregiver for minors. Hemp derived CBD with no more than 0.3 percent delta 9 THC on a dry weight basis is federally legal, but a number of states still set their own age floor at 18 or 21 for those products. Verification is a legal duty placed on the seller, not a courtesy, and a two second glance at a card does not always satisfy state requirements.
Federal baseline and state control
The 2018 Farm Bill removed hemp from the Controlled Substances Act and left the FDA in charge of how hemp ingredients may appear in foods, supplements, and cosmetics. It did not create a national purchase age for cannabis. Every age floor you meet at a counter comes from state law, and those laws differ by product type, THC content, and whether the buyer holds a medical card. A shop in one state can sell a hemp tincture to a 19 year old while a shop in the next state cannot.
Age Verification Process for Cannabis Purchase: A Comprehensive Guide
Minimum ages by product type
- Adult use flower, vape cartridges, and edibles: 21 in every state with a legal adult use program.
- Medical cannabis: 18 in most medical states, sometimes lower with a caregiver or guardian.
- Hemp derived CBD and other topical or ingestible hemp goods: no federal floor, state rules range from none to 18 to 21.
- Hemp goods with intoxicating cannabinoids such as delta 8 THC: a growing list of states restricts these to 21.
Method one: manual ID check at the counter
The employee holds the ID, compares the face to the photo, reads the birth date, and inspects the card for tampering.
Age Verification Rules for Buying Cannabis: A Comprehensive Guide
- Pros: no equipment cost, works with any state or tribal ID, lets staff flag an altered document.
- Cons: depends on clerk training, is easy to rush during a busy shift, and produces no record that the check happened.
Use this method in a small shop with steady foot traffic and well trained staff, or as the second step behind a scanner.
updated cannabis age verification rules 2026
Method two: electronic scanning and age estimation
Scanners read the barcode or magnetic stripe on a driver license or state ID. Some systems also estimate age from a face image and then send the customer to a manual check if the estimate lands near the limit.
- Pros: creates a timestamped record, catches expired and counterfeit formats, and cuts the chance that a clerk misreads a birth date.
- Cons: costs money to deploy and maintain, can fail on out of state or damaged documents, and raises data retention questions you must answer in your privacy policy.
Use this method in a delivery operation, a high volume store, or any market where regulators audit transaction logs.
Documents that count and documents that do not
- Accepted in most states: a valid driver license, a state issued identification card, a US passport or passport card, a military ID, and some tribal IDs.
- Often refused: expired documents, paper temporary permits without a photo, foreign IDs that staff cannot read, and photocopies.
- Never accepted: a school ID, a library card, a credit card, or a verbal claim of age.
A vertical driver license does not make a buyer ineligible. It only signals that the person was under 21 when the card was issued, so the clerk still has to read the date.
Online orders, curbside pickup, and delivery
An online age gate is not the same as age verification. Checking a box that says "I am 21" satisfies nobody. For shipped orders, retailers typically run an identity check against a public records database and may require a signature and photo ID at the door. For delivery and curbside, the driver checks the ID in person at handoff. If the buyer cannot produce it, the order goes back. Keep in mind that a hemp product shipped across state lines can be legal to sell yet illegal for the buyer to possess in their home state.
Common mistakes that create liability
- Accepting an expired ID because the photo looked right.
- Letting a regular customer skip the check.
- Storing scanned customer data without a written retention limit.
- Assuming a medical card exempts a patient from the store's own age policy.
- Training staff once at hire and never again.
What this means for CBD shoppers
Bring the same ID you would use at a pharmacy or a bar. Expect an 18 or 21 floor on hemp products in many states, expect a signature for shipped orders, and expect a check even when you look well over the limit. For store owners, the practical move is a written policy that lists accepted documents, a scanner or a second set of eyes for anyone who looks within five years of the threshold, and a short retention rule for any data you capture. That combination meets the standard regulators look for and keeps the transaction quick.