Food Safety Fundamentals for Home Food Producers

You can sell food from your home kitchen because your state decided the foods you make are low risk, not because anyone checked your kitchen. The FDA Food Code, the rulebook most health departments adapt for restaurants and retail, says a private home "may not be used for conducting food establishment operations" (section 6-202.111). Cottage food laws are carve-outs from that rule, and most trade inspection for a short list of foods that stay safe at room temperature. Our explainer on what counts as cottage food covers how each state draws its list. The exemption changes who is watching, not what makes people sick, so the habits an inspector would look for have to be yours by choice. Here they are, in roughly the order they go wrong.

Hands, and when to wash them

The Food Code procedure (section 2-301.12) runs at least 20 seconds: rinse under clean warm water, apply soap, rub hands and forearms vigorously for 10 to 15 seconds while working on fingertips, between fingers, and under the nails, then rinse and dry. CDC's consumer version is the same in five words: wet, lather, scrub, rinse, dry.

When to wash matters as much as how. Section 2-301.14 sets the moments: before handling food or clean equipment, after the toilet, after touching bare skin other than clean hands and arms, after coughing or sneezing or eating or tobacco, after handling soiled equipment, when switching from raw to ready-to-eat food, before gloves, and whenever you change tasks. A home kitchen adds a line: after the phone, the dog, or a door handle the rest of the house is using.

Section 3-301.11 bars bare-hand contact with exposed ready-to-eat food and calls for deli tissue, spatulas, tongs, single-use gloves, or dispensing equipment. Dough headed for the oven is not ready to eat. The cooled cookie you are boxing is. Georgia's cottage food directives add the rest: no eating, drinking, or tobacco in the production area, never taste with the same utensil twice, hair restrained, clean outer clothing, rings off.

Sanitizer belongs in your market bag: CDC calls soap and water the best option in most situations and reserves 60-percent-alcohol sanitizer for when no sink is available. You have one.

Running production as a separate shift

The simplest way to make a home kitchen safe for a business is to stop it being a home kitchen for a few hours. California requires that: preparation, packaging, or handling "may not occur in the home kitchen at the same time as any other domestic activities including family meal preparation, dishwashing, clothes washing or ironing, kitchen cleaning, or guest entertaining." The same rules require food contact surfaces and utensils to be washed, rinsed, and sanitized before each use, storage and prep areas to be vermin-free, and no smoking while product is in progress.

Georgia supplies the storage half: ingredients and finished products kept separate from the residential food supplies, and nobody in the work area but the operator and the people working under them. In practice, a labeled shelf the family knows not to open, and a rule that the peanut butter for sandwiches is not the peanut butter for the cookies.

Health is the part people skip. Georgia keeps anyone with vomiting, fever, diarrhea, jaundice, or a sore throat with fever out of production, and Minnesota extends it to the whole house: do not make, sell, or store cottage food at home if anyone there is sick. Decide now how you will tell customers a batch is cancelled, so a stomach bug on Thursday is not a judgment call on Friday. If you are staging ingredients in the garage four nights a week, you may be past what a home kitchen can carry: see cottage food kitchens versus commercial kitchens.

Pets, children, and everyone else in the house

The Food Code bars live animals from a food establishment's premises (section 6-501.115), excepting aquarium fish and service or patrol dogs. Cottage rules carry the principle home. California: "infants, small children, or pets may not be in the home kitchen during the preparation, packaging, or handling of any cottage food products." Georgia: no pets in the permitted area at any time during preparation or packaging. Other states use softer wording and some say nothing, so read yours.

Gate the door, wash the surfaces the cat walks on before sanitizing, and wash your hands after touching an animal. If a partner or a teenager helps, they are part of the operation, and in California and Illinois they need the same training the operator does.

Allergens: nine to track, and how cross-contact happens

Federal law recognizes nine major food allergens: milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, and sesame. FDA records that the FASTER Act, signed April 23, 2021, made sesame the ninth, effective January 1, 2023. How to declare them is our cottage food labeling guide; keeping them out of the wrong products is this section.

FDA's compliance policy on allergens lists how they reach the wrong food at manufacturing scale: improper rework addition, product carry-over from common equipment and production sequencing, and an allergenic product sitting above exposed product. Each has a home-kitchen twin. A mixer bowl that held peanut butter dough and got a quick rinse. Wheat flour dust drifting onto gluten-free brownies cooling on the next counter.

The controls scale down without changing. Sequence the day so products with the fewest allergens come first and the nut-heavy ones last. Wash, rinse, and sanitize between allergen changes instead of wiping. Keep a scoop in each bin so the wheat flour scoop never visits the almond flour. Store allergen ingredients below other ingredients, not above.

FDA is also clear that "may contain" statements are not required by law and are meant for unavoidable cross-contact by a producer who already has good practices in place. They do not substitute for sequencing and cleaning, and a shopper with a peanut allergy reads a vague warning as a reason to keep walking.

Time and temperature, and why your allowed-foods list looks the way it does

The Food Code calls food that needs refrigeration or hot holding "time/temperature control for safety" food, TCS for short; older rules said "potentially hazardous." The definition in section 1-201.10 covers raw or heat-treated animal foods, heat-treated plant foods, raw sprouts, cut melons, cut leafy greens, cut tomatoes, and garlic-in-oil mixtures, unless modified so they cannot support pathogen growth. TCS food is held at 41°F or below or 135°F or above (section 3-501.16). In between, pathogens grow.

That range shapes nearly every cottage food list. A state that does not inspect your kitchen cannot verify your refrigerator, so most limit producers to food that never needed one: breads, cookies, most cakes, jams, dried goods, candy. A few now permit some TCS products under conditions. Texas is one: those foods must be registered with DSHS, held and delivered at 41°F or below or 135°F or above, and labeled with safe handling instructions. Our Texas guide has the detail.

Ingredient discipline matters even when the finished product is shelf stable. CDC's floor: refrigerator at 40°F or below, freezer at 0°F or below, nothing perishable out more than two hours, or one hour above 90°F. Eggs, butter, and the cream cheese for a filling are perishable whether or not the cake is. That one-hour rule is why market days get their own guide, keeping food safe in summer heat.

Water activity and pH in plain terms

Two numbers decide whether a food can sit on a market table all morning. Minnesota puts it plainly: non-potentially hazardous foods have "a pH of 4.6 or below, meaning they are acidic, or have a water activity of 0.85 or less, meaning they are relatively dry or have a high sugar or salt content that binds up water, making it hard for bacteria to grow." Most state cottage laws use one threshold or both.

Water activity is not moisture content. Virginia Tech's extension bulletin defines it as the free water available for chemical and microbial reactions, on a 0.0 to 1.0 scale where 1.0 is pure water. Sugar and salt tie that water up, which is how a wet-looking jam is shelf stable and a moist cake is not.

Plain bread sits well above 0.85 and is allowed nearly everywhere, because unfilled baked goods are usually named in state law rather than tested. The threshold does its real work on the in-between products: fruit-filled pastries, frosted cakes, fudge, dense quick breads. Before you trust a home meter, read University of Minnesota Extension's worked example. Five samples of one banana bread read 0.852, 0.781, 0.812, 0.855, and 0.798, averaging 0.8196, crust lowest and center crumb highest. Corrected for that meter's variability, the upper limit came out at 0.881, over the line. Extension's advice: develop the recipe with a meter, then confirm anything under 0.85 at a commercial lab, about $30 per product.

pH is the harder line. The National Center for Home Food Preservation puts the boundary between acid and low-acid foods at 4.6. Above it, botulinum spores are very hard to destroy at boiling-water temperatures, so low-acid foods have to be pressure canned at 240°F to 250°F. That is why Texas excludes low-acid canned goods outright while Minnesota allows home-canned pickles, vegetables, and fruit at pH 4.6 or below. Check the wording in your own state's guide.

Cooling, storing, and packaging without inviting mold

The Food Code's cooling rule for TCS food has two stages: 135°F to 70°F within two hours, then to 41°F or below within six hours total (section 3-501.14). Its methods: shallow pans, thinner portions, an ice water bath with stirring, loosely covered containers (section 3-501.15). That covers anything perishable you make, family dinner included.

For shelf-stable baked goods the enemy is moisture. A loaf bagged warm sweats inside the plastic, and University of Minnesota Extension's shelf-life guidance is blunt that moist environments are ideal for the growth of bacteria and mold. Cool everything fully on a rack before bagging, store finished product airtight somewhere cool and dry, and pull a batch at the first sign of mold or off flavor. A "best by" date is a promise, so base it on batches you have held and checked, not a number off someone else's label. Packaging that survives that storage is in our packaging guide.

Cleaning is not sanitizing

Penn State Extension draws the line: cleaning removes visible soil, sanitizing reduces the pathogens left behind to safe levels. Order matters, because a dirty surface cannot be sanitized. Scrape or soak off the big pieces, wash with detergent, rinse, sanitize, air dry. The Food Code defines sanitization as a 5-log reduction, 99.999 percent, of disease organisms on an already cleaned food-contact surface, and that number is only reachable when the cleaning step was real.

The cheapest home sanitizer is plain unscented chlorine bleach. Penn State's dilution is one teaspoon per quart or one tablespoon per gallon, which lands under 100 parts per million, mixed fresh daily because the solution stays active only 24 hours. Keep it in a spray bottle with the contents labeled, which is what Georgia's directives ask for, and walk away while the surface dries. Follow the bleach label too: the Food Code requires sanitizers to be used according to their EPA-registered label instructions, and the food-contact dilution lives there. California's rule of washing, rinsing, and sanitizing before each use is a good default anywhere.

Training: what states require, and why to take a course anyway

Requirements vary widely and they move. These five come from the agency pages in the sources, read on September 2, 2026. Local health departments add conditions of their own, so treat the table as orientation and the agency page as the rule.

Take a course where it is optional. A basic food handler class makes the temperature numbers and the wash-rinse-sanitize sequence reflexes, and the certificate answers the market manager who asks before accepting your application.

A production-day routine you can tape inside a cabinet

Before you start: household cooking finished, pets out, door closed, hair tied back, jewelry off, phone out of the kitchen, hands washed, surfaces and tools washed, rinsed, sanitized, air dried, refrigerator reading 40°F or below.

While you work: fewest-allergen products first, wash-rinse-sanitize at every allergen change, tongs or papers for anything ready to eat, a fresh spoon for every taste, hands washed at every task change.

After: everything cooled on racks before packaging, finished product in airtight containers on the business shelf, labels checked against the ingredient packages, bleach poured out, and a line in the batch log naming what you made, when, and from which ingredient lots.

The batch log is the entry nobody wants to keep and the only thing that narrows a problem to one afternoon. The rest of setting up, from registration through labels, is in our guide to starting a cottage food business.