Where is cannabis legal by state? There is no single answer that covers every product. Some states allow adult-use marijuana, some allow medical cannabis only, some allow hemp-derived CBD with THC limits, and some restrict products such as delta-8 THC. Before you buy CBD or another cannabis product online, check the product type, the THC content, and your state and local rules. For a CBD purchase, the strongest buying signal is a batch-specific certificate of analysis (COA) plus a label that states delta-9 THC at or below 0.3% on a dry weight basis. A state cannabis map shows broad legal status. It does not confirm that a specific product is legal where you live.
What to look for before you buy
Start with the product category, then match it to state law. The same state can treat hemp CBD, medical marijuana, adult-use marijuana, and delta-8 THC in different ways.
- Product type: Hemp-derived CBD, marijuana-derived CBD, medical cannabis, adult-use THC, and hemp-derived intoxicating cannabinoids follow separate rules. Confirm the category on the label and the COA.
- THC value: Federal hemp law uses a 0.3% delta-9 THC dry weight limit. Some states use total THC, and some set stricter caps. A label that hides the THC number is a reason to skip the product.
- Batch-specific COA: The lab report should match the batch or lot code on the package. It should show cannabinoid potency and tests for pesticides, heavy metals, microbials, and residual solvents.
- Clear label math: Look for mg CBD per serving, servings per container, total CBD, THC content, batch number, and a company contact. Vague labels such as "full spectrum blend" without numbers do not help you compare products.
- State limits on delivery and age: Check minimum age, medical card rules, and shipping restrictions. An online seller may ship to your state, but that does not replace state or local law.
Parameter bands for a CBD purchase
Use these ranges as label checks, not as medical advice. The batch COA should support the numbers on the package.
- Delta-9 THC: 0.0% to 0.3% on a dry weight basis for hemp products. If the state uses total THC, treat the total as the number that matters.
- CBD per serving: 5 mg to 50 mg is a common retail range. Pick a product that states the exact amount and does not force you to guess.
- Total CBD per package: 300 mg to 1,500 mg is a common range for tinctures and oils. Compare cost per mg only after you confirm the batch test.
- COA age: Prefer a report dated within 12 months for the same batch. A fresh report for an old batch is a warning sign.
- Contaminant results: The COA should show pass results for pesticides, heavy metals, microbials, and residual solvents. Missing panels are a gap, not a neutral result.
Common pitfalls
- Reading one state map as a full answer: Adult-use legal status does not cover hemp CBD, medical products, or delta-8 in the same way.
- Assuming hemp equals legal everywhere: Federal hemp limits do not erase state product bans, age limits, or labeling rules.
- Ignoring intoxicating hemp cannabinoids: Delta-8, THC-O, HHC, and similar products face fast-changing state rules. Check the exact cannabinoid, not just "hemp."
- Accepting a generic COA: A report without a batch code cannot prove that the oil in your bottle passed testing.
- Skipping local rules: Some cities and counties restrict sales or delivery beyond state law.
FAQ
Is CBD legal in all 50 states?
Hemp-derived CBD with no more than 0.3% delta-9 THC is legal under federal law, but state rules can restrict sales, product types, age, and labeling. Check your state before you buy.
Does a legal cannabis state mean I can buy any cannabis product online?
No. Online shipping, medical card rules, and product limits can differ from in-store rules. Confirm the seller's compliance terms and your state law.
Where do I check my state's rules?
Use your state department of agriculture, health department, or cannabis regulator. For hemp products, the state agriculture department often publishes the hemp plan and THC limits.
What should I check first on a CBD label?
Check the batch code, THC value, CBD mg per serving, and COA access. If the label does not connect to a batch-specific lab report, keep looking.