Tobacco

Age verification for vape stores: USA

· 7 min read

Applies to
Retailers selling ENDS, e-liquids and vape hardware to consumers in the United States
In force
Retail rules for covered tobacco products since 2016; federal minimum age 21 since 20 December 2019
What to do
Decide whether the store admits anyone under 21, because that single choice sets the rest of the rules

FDA's own page on e-cigarettes and other ENDS, current as of 6 May 2026, states the position in one sentence: "To date, FDA has authorized 45 e-cigarettes." A mid-sized vape store carries several hundred distinct products.

The gap is not an enforcement backlog in the ordinary sense. It is the shape of the statute. 21 U.S.C. § 387j(a)(1) defines a "new tobacco product" as any tobacco product "that was not commercially marketed in the United States as of February 15, 2007", or any modification of one marketed after that date — a change in "design, any component, any part, or any constituent" included. Essentially every vape on sale is a new tobacco product, and § 387j(a)(2) requires a marketing order before it may be sold.

So the age check is the second question. It matters, and the federal rule governing it is unusually specific — but it runs downstream of whether the item being sold has an order at all.

The counter rule, in full

Retail duties live in 21 CFR 1140.14(b), which applies to "covered tobacco products" and has three limbs.

The threshold itself came from a statute rather than the rule. FDA's page on Tobacco 21, current as of 7 August 2025, records that legislation signed on 20 December 2019 raised the federal minimum age for sale from 18 to 21 and "became effective immediately".

No retailer may sell to any person younger than 21. Each retailer "must verify by means of photographic identification containing the bearer's date of birth that no person purchasing the product is younger than 21 years of age". And "no such verification is required for any person over the age of 29."

The third limb is the one that shapes the shop. A retailer may not sell covered tobacco products "with the assistance of any electronic or mechanical device (such as a vending machine), except in facilities where the retailer ensures that no person younger than 21 years of age is present, or permitted to enter, at any time."

The check decides the store's layout

Paragraph (b)(3) reads as a rule about vending machines. It is also the rule that determines whether a vape store may let customers pick products up.

Section 1140.16(c) sets out the same logic for cigarettes and smokeless tobacco: sale only in "a direct, face-to-face exchange between the retailer and the consumer", with vending machines and self-service displays given as examples of what that forbids, and an exception for machines and self-service displays "located in facilities where the retailer ensures that no person younger than 21 years of age is present, or permitted to enter, at any time."

Two viable store designs follow, and they are not variations on each other. A store that admits under-21s runs its age check at the register and keeps stock behind the counter, handed over by a person. A store that admits nobody under 21 runs its age check at the door, continuously, and may put product on open shelves.

The second is the model most specialist vape shops adopt, and its cost is exactness. "At any time" is not a policy about purchasing; it is a condition on the premises. A minor accompanying a parent, a delivery driver's teenage assistant, a candidate arriving for an interview — each defeats the exception while present, and the exception is what the whole self-service floor rests on. The door check is therefore doing more work than the register check it replaced, and it has to be logged like a control rather than performed like a courtesy.

What "covered tobacco product" leaves out

The scope of 1140.14(b) comes from a definition with a carve-out in it. Section 1140.3 provides that a "covered tobacco product" means any tobacco product deemed subject to the Federal Food, Drug, and Cosmetic Act, "but excludes any component or part that is not made or derived from tobacco."

E-liquid is comfortably inside. The same section reproduces the statutory definition of a tobacco product as any product "made or derived from tobacco, or containing nicotine from any source" — wording that covers synthetic nicotine as well as tobacco-derived, following the 2022 amendment recorded in the section's authority note.

A battery, a mod, an empty tank or a coil made from steel and cotton is a different matter. It is a component or part, and it is not made or derived from tobacco, which on the face of the definition places it outside the federal 21-and-photo-ID rule. That is a reading of the regulation rather than a determination about any particular product, and it is not permission: state and local law regulates vape hardware directly in much of the country, and a store running two ID policies at one register will get the harder one wrong.

Nothing may be given away

The sampling model that specialist vape retail grew up on is prohibited outright, and the prohibition is drafted more broadly than the age rules around it.

Section 1140.16(d)(1) provides that no manufacturer, distributor or retailer "may distribute or cause to be distributed any free samples of cigarettes, smokeless tobacco, or other tobacco products", using the statutory definition of a tobacco product rather than the narrower covered-tobacco-product one. E-liquid is inside that phrase.

The single exception, in paragraph (d)(2), is for smokeless tobacco in a qualified adult-only facility, and the conditions attached to it are worth reading as a measure of how narrow it is: identification checked by a law enforcement officer or a licensed security guard, no alcohol served, a temporary enclosed structure with an opaque barrier from within 12 inches of the floor to at least 8 feet, no exterior advertising. It does not extend to ENDS.

So the age check has no role in a giveaway, because there is no lawful giveaway to gate. A tasting bar, a free starter kit with a first purchase, a sample bottle handed over at the counter — none of these becomes permissible by verifying that the recipient is 21.

Mixing liquid changes what you are

FDA's ENDS page carries a heading most retail compliance work never reaches: "Vape Shops That Mix E-Liquids or Modify Products". A shop that mixes or prepares liquid nicotine, or creates or modifies any type of ENDS, takes on manufacturer obligations, and FDA notes that "some vape shops may have legal responsibilities as both manufacturers and retailers of tobacco products."

The premarket problem from the opening then lands inside the store rather than upstream of it. A shop that blends its own liquid is producing new tobacco products under § 387j, on its own account.

What this looks like in practice

  • Decide the door policy first. Admitting nobody under 21 unlocks self-service under 1140.14(b)(3); admitting anyone under 21 forecloses it entirely.
  • If the store is adult-only, treat entry as the control point and record it. The exception is about presence, not purchase.
  • Verify by photographic identification bearing a date of birth. The regulation names the document type and the data element on it.
  • Keep the over-29 allowance as an allowance. It is the one place the rule tolerates judgement, and it is the first thing an inspection tests.
  • Apply the strictest applicable rule to hardware. The federal definition excludes components not derived from tobacco; state law frequently does not.
  • Remove giveaways from the promotion set rather than age-gating them. Section 1140.16(d)(1) bars free samples of tobacco products, and its one exception does not cover ENDS.
  • Check marketing authorisation status with suppliers per product. FDA's own page declines to publish a comprehensive list and directs retailers to ask.

The United Kingdom asks whether the check was reasonable. The United States asks for a photograph, a date of birth, and a decision about who is allowed through the door — and then treats the shelves as a consequence of that decision.

Checkout-Ready Age Verification for Regulated Ecommerce

Age verification that runs inside checkout for tobacco, vape, alcohol, CBD, and other age-restricted catalogs. White-label, sub-60-second, $0.30 per verified order through official Shopify and WordPress (WooCommerce) integrations.

See how it works