Which US States Require Age Verification for Adult Sites (2026)

How many states require age verification for adult sites?

More than two dozen. As of mid-2026, roughly 25 states have laws in effect requiring commercial sites where a large share of content is harmful to minors to confirm visitors are adults. The number moves often as new laws take effect, and trackers differ by a state or two depending on effective dates and legal challenges.

The first laws took effect in 2023 in states including Louisiana, Texas, Utah, Arkansas, Mississippi, Montana, and Virginia. Waves through 2024 and 2025 added many more, among them Florida, Tennessee, South Carolina, Indiana, Kentucky, Alabama, Nebraska, Idaho, Kansas, North Carolina, Georgia, Arizona, Ohio, and Missouri, with further states passing laws into 2026.

What did the Supreme Court decide about age verification?

In Free Speech Coalition v. Paxton, decided June 27, 2025, the Supreme Court upheld Texas's age-verification law by 6 to 3. Writing for the majority, Justice Clarence Thomas held that the law only incidentally burdens adults' protected speech and survives intermediate scrutiny, the middle tier of First Amendment review.

Justice Elena Kagan, joined by Justices Sotomayor and Jackson, dissented, arguing the law should have faced strict scrutiny because adults might give up lawful speech rather than hand over an ID. The practical result is a green light: with the constitutional question settled, more states are expected to pass and enforce these laws.

What do these age checks actually require?

It varies by state. Some laws name a government ID; others accept transactional or public-records data, or leave the method to the site as long as it is reasonable. The trigger is usually the same: the rule applies when roughly a third or more of a site's content is deemed harmful to minors.

• -Government ID scan: states like Louisiana, Texas, Utah, Arkansas, and Montana name identity-document checks
• -Transactional or public-records data: mortgage, employment, or education records used to confirm age
• -Commercial databases or a third-party verification service run the check on the site's behalf
• -"Reasonable age verification" with the exact method left to the site: many states use this open wording

A newer wave of bills aims the requirement at app stores and device makers rather than individual sites, so the age check happens once at the device or store level. That model is passing in some states and being fought in court, so expect the map to keep shifting.

What does age verification do with your ID and face?

You almost never hand the adult site itself your ID. A third-party verification company does the check, and depending on the provider it may log your ID image, a face scan, your IP address, and a device fingerprint. What each keeps, and for how long, varies, and it has already been the subject of controversy.

That is the real privacy cost of these laws: your identity now passes through one more company that holds a copy of it. The full breakdown of what verifiers collect and keep is in what online age verification does with your data.

Where this leaves you

Every one of these laws routes your identity through one more third party, a verification vendor that now holds your ID or your face, on top of the brokers, breaches, and old accounts already holding pieces of you. You cannot vote these laws away from your couch, but you can see and shrink the exposure you do control.

Clearfront scans your digital footprint in one sweep on your own machine, no cloud, and an AI security analyst reports which accounts, breaches, and records are publicly tied to your name. Install Clearfront free and run it on yourself, or get the free removal guide to start clearing what turns up.