No, you do not need a medical card to buy CBD in most cases. Hemp-derived CBD products that contain no more than 0.3% delta-9 THC are federally legal and sold at retail without a prescription, permit, or medical cannabis registration. A card only comes into play if you want a CBD product that exceeds that THC threshold or is derived from marijuana rather than hemp, and even then only in states that route those products through a medical cannabis program.
The Federal Rule That Removed the Card Requirement
The 2018 Farm Bill redefined hemp as the Cannabis sativa L. plant and its derivatives with a delta-9 THC concentration of no more than 0.3% on a dry weight basis.1Office of the Law Revision Counsel. 7 USC 1639o – Definitions Anything at or below that line is hemp, and hemp sits outside the Controlled Substances Act.
Marijuana is still a Schedule I controlled substance, but the federal definition of marijuana now explicitly excludes hemp.2Office of the Law Revision Counsel. 21 USC 802 – Definitions THC that comes from hemp is also carved out of Schedule I.3Office of the Law Revision Counsel. 21 USC 812 – Schedules of Controlled Substances The practical effect is simple. CBD extracted from hemp that stays under 0.3% THC needs no medical card, no doctor’s recommendation, and no special permit at the federal level. You can buy it at a pharmacy, a health food store, a gas station, a dedicated CBD shop, or online.
When a Medical Card Does Come Into Play
Two kinds of CBD products fall outside the federal hemp definition: anything derived from marijuana, and anything that exceeds 0.3% delta-9 THC. Those products remain federally illegal outside of state-authorized medical or recreational cannabis programs. Buying them usually requires either living in a state that has legalized recreational marijuana or holding a state-issued medical cannabis card.
A handful of states route certain CBD products exclusively through their medical cannabis programs. The pattern typically looks like this: low-THC, hemp-derived CBD stays available at retail without a card, but any CBD product above the state’s THC limit, or any product derived from marijuana, is only available to registered medical patients. Getting on a state medical program generally means a qualifying medical condition, a doctor’s evaluation, and a state registration fee. Registration fees themselves usually run from nothing up to around $125 per year, separate from what the evaluating physician charges.
If the CBD product you want is a mainstream hemp extract sold at retail, none of that applies. The card system is aimed at the higher-THC end of the cannabis market, not everyday CBD tinctures, capsules, and topicals.
State Rules That Apply Even Without a Card
Federal law sets a floor. States can add their own restrictions on top of it, and several do. None of these turn hemp CBD into a card-only product, but they can change what you’re allowed to buy or how old you have to be.
Minimum Age to Buy
There is no federal minimum age for hemp-derived CBD, so states have filled the gap. The minimum purchase age is typically 18 or 21, depending on the state and the product type. Some states have moved toward a flat 21 requirement for all consumable hemp products. Retailers often apply the stricter age themselves, especially for anything designed to be inhaled or eaten. Expect to show ID.
Bans on Specific Product Forms
A growing number of states restrict or ban particular CBD product formats even when the THC content is within the federal 0.3% limit. Smokable hemp flower has drawn the most attention from state regulators, with several states banning its sale or tightening THC rules for inhaled products. Some states also restrict CBD-infused edibles and beverages, or set THC caps below the federal limit for certain categories. These rules change frequently. A product that is freely available in one state may be off-limits in the next state over, and that has nothing to do with whether you hold a medical card.
What “No Card Required” Doesn’t Mean
Skipping the card doesn’t mean the product is regulated the way a prescription drug or dietary supplement is. The 2018 Farm Bill legalized growing and selling hemp, but the FDA still treats it as illegal to add CBD to food or market it as a dietary supplement, because CBD is the active ingredient in an FDA-approved prescription drug.4Food and Drug Administration. Hemp Production and the 2018 Farm Bill
In January 2023, the FDA said its existing frameworks for food and supplements are not well-suited for CBD and that it would work with Congress on a new approach.5U.S. Food and Drug Administration. FDA Regulation of Cannabis and Cannabis-Derived Products, Including Cannabidiol (CBD) As of 2026 no new federal framework has been finalized, and the FDA continues to issue warning letters to companies marketing CBD-infused foods, drinks, and supplements with health claims, with multiple enforcement actions in 2025 alone.6U.S. Food and Drug Administration. Warning Letters for Cannabis-Derived Products Those enforcement actions target manufacturers and sellers, not consumers. You will not get in trouble for buying CBD gummies at a store. But the regulatory gap means what’s on the shelf isn’t held to the quality standards of conventional supplements, which is why verification comes down to you.
Buying CBD Without a Card, Safely
Since the federal government doesn’t police CBD product quality the way it does food and pharmaceuticals, the check falls on the buyer. The single most useful step is confirming a Certificate of Analysis (COA) from an independent third-party lab. A good COA confirms the cannabinoid profile, including the exact delta-9 THC level, and screens for contaminants like pesticides, heavy metals, and residual solvents.
Reputable brands make COAs easy to find, often through a QR code on the packaging or a searchable page on their website. If you have to hunt for lab results, or they don’t exist, buy elsewhere. Beyond the COA, useful things to see on a label include the CBD source (hemp, not unspecified “cannabis”), the product type (full-spectrum, broad-spectrum, or isolate), and the CBD amount per serving in milligrams.
CBD products come in three main types, and the differences matter beyond legality:
- Full-spectrum CBD contains CBD along with other cannabinoids, terpenes, and up to 0.3% THC. It’s the type most likely to cause a positive drug test, even at legal THC levels.
- Broad-spectrum CBD contains CBD and other plant compounds with THC removed or reduced to undetectable levels, though trace THC can sometimes remain.
- CBD isolate is pure CBD with no other cannabinoids, and it carries the lowest risk of trace THC.
You can buy hemp-derived CBD online, at pharmacies, at health food stores, at gas stations, and at dedicated CBD shops. Online retailers tend to give better access to lab reports and detailed product information; brick-and-mortar stores let you ask questions and read packaging before paying. Wherever you buy, expect to show ID for the state’s minimum age.