FDA Authorizes Flavored Vapes — But Access Controls Are Critical

The FDA just issued its first-ever PMTA authorization for non-tobacco, non-menthol flavored ENDS products. This is a real regulatory first. The access controls behind these authorizations are an important signal for the industry, but they should not be treated as a universal PMTA safe harbor. Age and identity verification infrastructure was not a footnote in FDA’s decision. It was central to it.

This does not mean all flavored vape products are now legal. State and local flavor restrictions still stand. The authorization applies only to the four specific products FDA reviewed.

But this precedent matters. The FDA has now confirmed that a non-tobacco flavored vape can meet its public health standard. This can happen when an applicant shows adult quitting benefits outweigh youth-use risks. It also requires strong access controls that keep the product away from minors.

What FDA Actually Did and What It Didn’t

FDA’s authorization of four new ENDS products — Classic Menthol, Fresh Menthol, Gold (mango), and Sapphire (blueberry), each an e-liquid pod containing 50mg/ml (5%) tobacco-derived nicotine — through the PMTA pathway marks a clear shift.

For years, the PMTA pathway for non-tobacco, non-menthol flavored ENDS products has been extremely narrow. FDA repeatedly treated youth appeal and youth access as central concerns in reviewing flavored ENDS applications, and its enforcement priorities focused heavily on unauthorized flavored cartridge-based ENDS products other than tobacco- or menthol-flavored products.

At the same time, it is more accurate to describe the federal landscape as one of enforcement priorities and PMTA denials, not a blanket federal flavor ban. State and local flavor restrictions may still independently prohibit or limit the sale of flavored ENDS products, even where a product has received FDA marketing authorization.

This authorization is significant because FDA has now shown that a specific non-tobacco, non-menthol flavored ENDS product can meet the public health standard when the applicant provides sufficient product-specific evidence, effective youth-access mitigation, and complies with marketing-order restrictions. It does not mean the pathway is open broadly, and it does not lower the evidentiary burden for future applicants.

  • FDA authorized four new ENDS products for legal U.S. market sale
  • For the first time, non-tobacco and non-menthol flavored products received PMTA authorization
  • FDA found the applicant’s evidence met the “appropriate for the protection of the public health” standard.
  • The evidence included cessation data and access controls.

What didn’t change:

  • The authorizations apply only to these specific products, not the category broadly
  • State and local flavor restrictions remain fully in effect
  • All other flavored vape products without PMTA authorization remain subject to enforcement
  • The burden of proof on applicants has not been lowered — it has been clarified

The threshold has not dropped. The pathway has been defined.

Why Access Controls Were Central to FDA’s Decision

The FDA’s announcement described specific access control requirements tied to these authorizations. These were not vague recommendations — they were concrete verification mechanisms that applicants built into their product and distribution model.

According to FDA, the access controls include:

  • Age and identity verification with government ID — confirming legal purchase eligibility at the point of sale
  • Phone or app pairing — binding the device to a verified adult user’s registered account
  • Device lockout — disabling the device when separated from the registered user’s paired phone
  • Random biometric check-ins require the registered adult user to confirm their identity over time.

This happens not only at the initial purchase.

This is not standard checkout age gating. This is continuous identity infrastructure. For these products, FDA credited a device-level access system that went beyond a one-time age check. Future applicants should not assume the same controls alone will be sufficient; they must still provide product-specific scientific evidence showing that the benefits to adults outweigh the risks to youth and nonusers.

That distinction matters. It signals what the FDA credited in this authorization.

The FDA does not expect easier access to flavor approvals. Instead, the FDA expects stronger, verifiable, long-term access controls. These controls are needed to stay in the market.

What This Means for ENDS Operators

This authorization creates a clearer, if demanding, path for flavored ENDS products seeking federal market access. It also raises the operational bar for the entire category.

For PMTA applicants:

  • Access control systems must be detailed, documented, and functional — not aspirational
  • Government ID checks, biometric login, and device-level controls are no longer theoretical advantages.
  • The FDA now cites them as important to authorization decisions.

For compliant ENDS retailers already in the market:

  • This reinforces that robust age and identity verification is the foundation of defensible compliance — not a competitive feature
  • Retailers who have invested in age verification tools are better positioned to respond to evolving FDA and state-level requirements
  • Operators without modern identity verification infrastructure should treat this announcement as a signal, not a comfort

For the broader category:

  • If this authorization framework holds, it defines what “doing it right” looks like: government ID verification, biometric reauthentication, fraud prevention, and auditability — at scale

How Token of Trust Supports ENDS Compliance and Market Access

TOT supports the identity, age verification, biometric reauthentication, fraud prevention, evidence, and reporting layers that can integrate into this architecture.

Age Verification and Age Gating 

Token of Trust’s age gate and age verification tools are built for regulated commerce. They are configurable, audit-ready, and built to meet documentation standards that the FDA and state regulators expect.

Biometric Face Verification 

Token of Trust’s biometric face verification performs real-time selfie-to-ID matching. For ENDS apps, you may need ongoing proof that the registered adult is still using the device. This capability supports that need.

See How Token of Trust Supports ENDS Compliance

FDA has now shown what a defensible access control system looks like. Token of Trust is built to deliver it. Talk to Token of Trust about building an FDA-ready age and identity verification architecture for ENDS.

FAQs

Q: Does FDA’s new PMTA authorization mean all flavored vapes are now legal?

No. The authorization applies only to the four specific products FDA reviewed and authorized for marketing. All other non-tobacco flavored ENDS products without PMTA authorization remain subject to enforcement. State and local flavor restrictions also remain in effect regardless of federal PMTA status.

Q: What access controls did FDA require for the newly authorized ENDS products?

FDA described age and identity checks using a government ID.

It also described phone or app pairing to link the device to a verified adult.

It included device lockout when separated from the registered phone.

It also noted random biometric check-ins to confirm the adult is still using the product.

Q: Can identity verification tools help an ENDS company with its PMTA application?

A strong PMTA application needs to demonstrate that the applicant has effective controls to prevent youth access. Documented, auditable identity and age checks, including government ID checks and biometric reauthentication, are evidence.

FDA now recognizes this evidence as important to authorization decisions. Token of Trust’s tools are designed to help build and document that control layer.

Q: Does Token of Trust support PACT Act compliance for online vape retailers?

Yes. Token of Trust offers PACT Act compliance tools. These include automated age checks at the point of sale.It also provides carrier reporting support. These tools help online ENDS retailers meet federal shipping and recordkeeping rules. Try our free to use Vape Excise Tax Calculator.