How old do you have to be to buy CBD when you’re selling it in a retail store or through an online checkout? It depends... There is no single federal age rule covers CBD sales across the nation.
The minimum age depends on your state, the product format you’re selling, and whether the SKU crosses into hemp-derived intoxicants like Delta-8.
Even though the age requirements for CBD products vary in several ways, having a vague policy is not acceptable. This guide provides a simple playbook for dispensary operators to build strict protocols for age verification while avoiding inconsistent checkout, confused customers, and compliance issues.
How Old Do You Have to Be to Buy CBD Under Federal law?
The 2018 Farm Bill set no federal purchase age for hemp-derived CBD — and that is still the case in 2026. But the federal hemp definition itself has changed. The Continuing Appropriations and Extensions Act of 2026 replaced the delta-9-only threshold with a total THC standard and a 0.4 mg per-container cap.
Many delta-8 and THCA products that used to qualify as "hemp" won't survive the new definition — making the age question moot for products that are no longer federally legal to sell at all. That’s why you’ll see retailers choose a baseline policy anyway, usually 18+ or 21+, depending on what they sell and how risk-averse they need to be.
In other words, you cannot build your SOPs on “federal law says…” for hemp CBD. You need a state-first policy, and you need to apply it by product type.
CBD Age Limit By State
When operators talk about the CBD age limit, most are really asking, “Is it 18+ or 21+?” That’s the right starting point, but it’s not the full picture. In many states, age expectations change based on what’s in the package and how the product is used.
In day-to-day retail, your minimum age is usually shaped by three things:
- Source: hemp-derived CBD versus marijuana-derived CBD sold under adult-use rules
- Format: ingestible or topical products versus vape and smokable items
- Intoxication risk: products marketed as Delta-8, Delta-10, or other hemp-derived THC variants
Additionally, you’ll want to confirm the current requirement with your state hemp program or cannabis regulator, especially if you sell newer cannabinoids and vape products, where enforcement shifts first.
| What you sell | What usually drives the age rule | What to do in your store |
|---|---|---|
| Hemp-derived CBD oils, capsules, gummies, topicals | Often 18+ or no explicit statute, depending on state | Pick a clear house policy and train to it, then card consistently |
| CBD vape products or smokable hemp | Frequently tied to vapor and tobacco-style age rules, commonly 21+ | Enforce age by SKU category, not a single store-wide number |
| Marijuana-derived CBD in an adult-use dispensary | Adult-use cannabis rules, typically 21+ | Run it like any other licensed dispensary transaction, with the same checks |
| Delta-8 THC products | Fast-changing state law and tighter scrutiny, often 21+ | Expect stricter ecommerce gating and more frequent policy updates |
Can You Buy CBD at 18?
Whether you can selling CBD to someone aged 18 depends on what kind of CBD you’re selling and where you’re selling it. In plenty of states, non-intoxicating hemp-derived CBD in a tincture or topical format may be treated differently than a vape cartridge or smokable item.
The easiest place for mistakes is a mixed display. A customer might grab a tincture and a vape, and your budtender might assume one age threshold covers the whole basket. That’s how accidents happen, even with good staff.
Age to Buy Delta 8: Why Delta-8 Needs its Own Rulebook
State rules for the age to buy Delta 8 are changing often and on top of it, many processors and ecommerce platforms set their own guardrails for hemp-derived THC products.
Delta-8 is psychoactive, and that has made it a legislative target. Many states have moved toward a 21+ approach for intoxicating hemp products, and enforcement can be more aggressive than what you’re used to with basic hemp CBD.
Editor's Note: Under the updated 2026 federal hemp definition, most delta-8 products won't qualify as hemp at all — the 0.4 mg per-container cap makes typical delta-8 vapes and edibles federally non-compliant. The age question becomes secondary to whether you can legally stock the product. Check your state's enforcement timeline and rules.
What to Standardize in Your Age Verification Workflow
An age rule only helps if it survives real life: new hires, shift changes, busy Saturdays, and that one customer who insists they “buy this all the time.” Your goal is consistency without slowing down the line.
- Write the rule the way your team works. Put it in plain language and make it easy to find during a shift.
- Card based on product type. If vapes are one threshold and topicals are another, your budtenders should never have to guess.
- Don’t assume ecommerce follows the same rules as in-store. Your online checkout may require stricter gating because of platform or payment requirements.
- Train the edge cases. Bundles, mixed baskets, and returns are where age mistakes sneak in.
From our work with licensed retailers, the fastest way to reduce slip-ups is to remove interpretation at checkout. That’s exactly where purpose-built retail tech earns its keep. If you’re running hemp/CBD or hemp-derived THC sales, a CBD/Hemp POS built for hemp and CBD retailers helps you set up repeatable workflows, so your policy is enforced the same way on every transaction.
FAQ: Age Verification Rules
How old do you have to be to buy CBD in the U.S.?
For hemp-derived CBD, there is no single federal minimum age. Your state and the product format drive the requirement. Many retailers use 18+ for non-smokable hemp-derived CBD, while 21+ is common for vape or smokable products and for marijuana-derived CBD sold under adult-use dispensary rules.
What is the typical CBD age limit for vape products?
In many jurisdictions, CBD vapes and smokable hemp track vapor or tobacco-style age rules, which commonly means 21+. Operationally, you’ll want to enforce this at the category or SKU level so a mixed basket cannot slip through.
Can you buy CBD at 18 if you are buying online?
Sometimes, but online sales can be stricter than in-store rules. Ecommerce platforms and payment processors may require tighter age gating, especially for vapeable, smokable, or intoxicating hemp products.
What is the age to buy Delta 8?
It varies by state, but many markets have moved to 21+ because Delta-8 is psychoactive. Even where state law is less explicit, online sales often default to 21+ due to platform and processor requirements.
How a POS Can Make Age Gates Consistent
The right POS will focus on compliance-first execution you can actually live with: fast checkout, clear prompts, and audit-friendly records that match how your store operates day to day.
Cova Software is built for regulated retail, where customer experience and compliance have to coexist in the same transaction. You’re not trying to “catch” customers. You’re trying to run a clean store where the rules are applied evenly and your staff is protected by process.
If you’re tightening your approach or preparing for a broader regulated footprint, you can dig into how we think about regulated retail workflows on Cova’s cannabis compliance software page.
No Comments Yet
Let us know what you think