What 2257 is, in plain language
18 U.S.C. 2257 is the federal record-keeping law for sexually explicit material. Its purpose is narrow and it is worth saying out loud, because it explains every requirement that follows: it exists to make certain that no one under 18 appears in pornography, and to make that provable on demand rather than merely asserted.
It does that by putting the burden on the producer. If you make explicit content, you must keep documentation showing that every person depicted was an adult at the time it was filmed, and you must be able to produce it. This is not a platform rule that a platform can waive for you. It is federal law, it applies to independent creators exactly as it applies to studios, and the fact that you shot it on a phone in your own bedroom changes nothing about it.
None of this is a reason to be nervous. It is a reason to be organized. The creators who run into trouble with 2257 are essentially never people who filmed something unlawful. They are people who filmed something entirely lawful and then could not produce the paperwork for it two years later.
Are you a "producer"? Almost certainly yes
The law splits producers into two kinds, and an independent creator selling their own content is usually both.
A primary producer is the person who actually creates the content: who films the scene, who is in it, who hires or works with the performers. If you shoot your own videos, that is you.
A secondary producer is a person or company that publishes, distributes or reproduces that content. A platform hosting your videos is a secondary producer, which is precisely why it will insist on verifying you and holding releases before it lets you upload anything.
The consequence for you is simple. You cannot outsource the obligation to the platform, and the platform cannot outsource it to you. Both of you are keeping records, which is why any serious platform asks for the same documents twice and why a platform that does not ask at all should worry you rather than relieve you.
What records you actually have to keep
For every performer who appears in explicit content you produce, you need to hold, at minimum:
| Record | What it means in practice |
|---|---|
| Government photo ID | A clear copy of a valid, unexpired photo ID showing date of birth. Passport or driver's licence. Legible, not a blurry phone shot of a screen. |
| Legal name | The performer's real name as it appears on the ID. |
| Every other name used | Stage names, aliases, maiden names, screen names, nicknames used in the content. All of them. |
| Date of the shoot | Which content the record relates to. A record that cannot be matched to a specific scene does not do the job. |
| Signed release | Written consent from the performer for the specific content, dated, signed, and covering distribution. |
Keep these organized so that you can go from a video to its records in under a minute. In practice that means one folder per performer, one subfolder per shoot, and a filename convention you will still understand in three years. If you appear in your own content solo, you still keep a record for yourself. Yes, really.
Get the release signed before the shoot
This is the single most useful piece of advice on this page, and it is the one most often ignored.
A release signed after the fact is a favour you are asking for. A release signed before the shoot is part of the shoot. The difference sounds administrative until the relationship ends, or the collaboration sours, or the person simply stops answering messages, and now you are holding a video you cannot lawfully publish and cannot prove anything about. That is not a hypothetical risk. It is the ordinary way careers get damaged in this industry, and it happens to people who did nothing wrong.
A workable release names the performer, states their legal name and any stage names, confirms they are over 18, identifies the content by date and description, and grants permission to distribute and sell it. Both parties sign and date it, and each keeps a copy. Get it in writing every time, including with a partner, including with a friend, including when it feels awkward. Especially then.
How this works on a platform
On OnlyFucks, verification is a one-time process per performer rather than a hurdle on every upload. You create a studio account and confirm you are over 18. You submit a government ID and a signed release for every performer who appears in your content. We verify the release, and from then on your uploads publish against it.
We keep the records required of us as a secondary producer, and you keep yours as the primary producer. Both sets exist, which is the point. Our full 18 U.S.C. 2257 compliance policy sets out what we hold and how to reach the custodian of records.
Worth being clear about what verification is not: it is not moderation of your taste. Verifying a performer is confirming that an adult consented, not judging what they consented to. Consensual hardcore between verified adults is permitted here, including the niches OnlyFans restricts, and the compliance process exists to protect that rather than to quietly narrow it.
Privacy: your legal name is in the records, not on the internet
2257 requires your legal name in the records. It does not require it to be public, and the distinction matters enormously if you work under a stage name.
Records are held by the producer and the custodian of records. They are not published, and no legitimate platform will display them. What actually exposes creators is unrelated to compliance: reused email addresses, a phone number shared with a personal account, a location visible in a photo background, and above all the data brokers who have been assembling and publishing your legal name, age, address and relatives from public records since long before you started creating. Someone who knows your stage name and your city can often close that gap in an afternoon, so it is worth getting your personal details taken down from the people-search sites that list them early, while your audience is still small.
Nothing on this page is legal advice, and if you are producing at scale or working with performers you do not know personally, an hour with a lawyer who knows adult media is money well spent.
Questions creators ask
What is 2257 compliance?
18 U.S.C. 2257 is the US federal law requiring producers of sexually explicit content to keep records proving every performer was over 18. In practice it means holding a copy of a government photo ID, the performer's legal and stage names, and documentation linking that ID to the specific content, and being able to produce those records on demand.
Do independent adult creators need to follow 2257?
Yes. The law applies to the producer of the content, and an independent creator filming and selling their own videos is a primary producer. There is no exemption for working alone, for filming at home, or for small scale. Any legitimate platform will verify you and hold releases because it is a secondary producer under the same law.
What does a performer release need to include?
The performer's legal name and every stage name used, confirmation they are over 18, the date and description of the content it covers, and explicit permission to distribute and sell it. Both parties sign and date it and each keeps a copy. Sign it before the shoot, because a release you have to chase afterwards is one you may never get.
How long do I have to keep 2257 records?
Keep them for as long as the content exists anywhere, and then longer. Content circulates for years after you stop selling it, and the records are what let you prove it was lawfully made. Practically, treat them as permanent: they are small files and the cost of keeping them forever is nothing next to the cost of not having them once.