If you have ever priced a brightening face cream and wondered why the same active sits at 1% in one factory's formula and 4% in another, the answer is usually regulatory rather than technical: kojic acid is the brightening ingredient whose chemistry is well understood but whose compliance window just got narrower in the EU. This guide breaks down how kojic acid works, what the new EU 1% limit means for face formulas, the concentration ranges that actually appear in products, and the stability and compatibility decisions that decide whether a kojic acid range looks consistent on the shelf. The reference platform is Lanthome's Green Avocado Kojic Acid and Glutathione Face Care Kit — a private label skin care set (model CP56-SP) whose specification lists kojic acid alongside niacinamide, vitamin C, hyaluronic acid, collagen and avocado — and we use it as the concrete example whenever the chemistry gets practical. It sits in the Skin Care Set collection, which is the natural home for a coordinated brightening kit.
Kojic acid is a small organic molecule produced by fungi during fermentation. It is not synthesized in a petrochemical plant; it is cultured. In food tradition, it has been present for centuries in Japanese and East Asian fermentation — the koji molds used to make sake, soy sauce and mirin produce it as a natural byproduct, which is how it first entered the cosmetic record as a pigment inhibitor in mid-twentieth-century research.
On a formulator's bench, kojic acid presents as a white to off-white crystalline powder that dissolves readily in water and is mildly acidic. Two practical consequences follow from that profile. First, it fits naturally into water-based platforms — serums, lotions, creams, toners — without solubilizers. Second, its acidity and oxidation behavior drive most of the stability work, which is the subject of Section 5.
Three names show up in conversations with suppliers, and only one of them is the raw acid. Kojic acid (INCI: Kojic Acid) is the parent molecule. Kojic acid glucoside is the sugar-conjugated derivative used when a brand wants a milder, more stable brightener in the 0.5–2% range. Kojic acid dipalmitate is the oil-soluble derivative used in emulsions where water solubility is a problem. They are three different INCI entries with different stability curves, so "kojic acid" on a spec sheet is ambiguous until you ask which one — and the label must carry the exact INCI name of the form actually used.
One buyer question that comes up with "natural" positioning: is it vegan? Kojic acid is a fermentation product built from plant substrates and fungal cultures, so it is generally treated as vegan in supply-chain documentation — but the substrate, culture source and processing aids vary by producer, which is why a brand claiming "vegan" should confirm that chain with the raw material certificate rather than assume it.
Here is where "brightening" marketing usually outruns the evidence, so let's separate what the mechanism actually supports from what labels tend to promise.
Melanin production runs through a short enzyme cascade. The rate-limiting step is the enzyme tyrosinase, which oxidizes tyrosine toward melanin precursors, and tyrosinase has a copper-containing active site. Kojic acid's classic, well-documented action is to chelate that copper site — it binds the metal ion and slows the enzyme's ability to process its substrate. The cosmetic outcome of that action is a slower appearance of new pigmentation, which is why the ingredient is used in products positioned around an even-looking complexion and the look of dark spots.
That one sentence is the whole citable mechanism. Everything else a marketing team wants to add — "antioxidant defense," "collagen support," "anti-aging" — belongs to the other actives in the formula, not to kojic acid. The Cosmetic Ingredient Review (CIR) maintains a published safety assessment for kojic acid that is the reference document for US market safety questions, and the EU's own Scientific Committee on Consumer Safety (SCCS) assessed the ingredient in its 2022 opinion — both of which anchor the regulatory section below.
The claim-language boundary is the same as for every active we have covered in these guides. Conservative, defensible language: "may help support the appearance of an even complexion," "commonly used for tone-appearance routines," "designed to visibly brighten the look of dark spots over time." Off-limits language: "treats melasma," "removes pigmentation," "clinically proven to lighten." The first set is cosmetic-appearance language; the second set is drug territory in the US and non-compliant claims territory in the EU. The difference between a shippable label and a compliance problem is usually the verb.
There is one regulatory change that matters more than any other for a kojic acid product, and it applies to the EU.
EU — now a hard 1% ceiling for face and hand products. Until 2024, kojic acid was not specifically restricted under the EU Cosmetics Regulation. That changed with Commission Regulation (EU) 2024/996, which added kojic acid as a new entry (375) in Annex III — the restricted substances list — after the SCCS final opinion on kojic acid (SCCS/1637/2) concluded the ingredient is safe as a skin lightening agent up to 1% in cosmetic end products. The entry, as published, allows kojic acid in face and hand products only, at a maximum of 1% in the ready-to-use preparation. The transition deadlines have passed: non-compliant products could not be placed on the EU market from 1 February 2025 and could not be made available from 1 November 2025. As of today, this is the law in force.
The practical consequences are worth stating plainly:
The EU also keeps its standard obligations on this ingredient: CPNP notification before market placement, a product safety assessment, and claims that meet the substantiation requirements of the claims regulation. None of that is new, but the 1% number is a hard input into the formula sheet now, not a supplier preference.
US — no concentration limit, claim discipline instead. In the United States, the FDA regulates cosmetics by safety and claims rather than by concentration caps; there is no maximum kojic acid level for a cosmetic product. The constraint is the drug/cosmetic boundary: a product whose label or advertising says it "treats," "cures" or "removes" a skin condition such as melasma or post-inflammatory hyperpigmentation is being marketed as a drug. "Brightens the appearance," "evens the look of tone," "supports a more even-looking complexion" stay on the cosmetic side. Under the modernized framework (MoCRA), the operational obligations — facility registration, product listing, adverse-event reporting — are the part of US compliance a private label brand actually touches, and a reputable OEM partner will already be structured for them.
| Market | Regulatory position | Practical implication |
|---|---|---|
| EU / EEA | Restricted: max 1% in ready-to-use face and hand products, as skin lightening agent (Annex III entry 375, Reg. (EU) 2024/996) | EU-bound face formulas capped at 1%; body lightening products outside the entry's conditions |
| US | No concentration limit; claims must stay cosmetic | 1–4% all allowed; claim language is the constraint |
| Other markets | INCI listing; local restriction checks apply | 1% is the safe working baseline for multi-market formulas |
Two labeling notes. First, the INCI name on the label is the exact derivative form used — "Kojic Acid," "Kojic Acid Glucoside" or "Kojic Acid Dipalmitate" — listed in descending order by weight; consumers cannot see your percentage from the label, which is exactly why the concentration belongs in your technical documentation and claim file, not on the front panel. Second, for multi-market brands, the EU 1% number is the one to design around: a formula that is compliant at 1% for the EU can simply be dosed higher for non-EU markets from the same base; the reverse is not true.
The commercial record for topical kojic acid is narrower than the marketing would suggest. Most mainstream leave-on face products sit in the 1–2% range; short-term spot treatments in non-EU markets push toward 3–4%; the glucoside derivative is typically dosed in the 0.5–2% band. And since 2025, 1% is the top of the range for anything destined for EU face and hand products.
Three practical conclusions follow:
| Concentration | Typical positioning | Buyer consideration |
|---|---|---|
| 0.5–1% | Daily brightening serums and creams; EU-compliant | The multi-market default; lowest sensitivity risk; still above the "trace" zone |
| 1–2% | Mainstream treatment products (non-EU) | Common commercial window; EU-legal only at the 1% end for face/hand |
| 3–4% | Short-term spot treatments (non-EU only) | Rising irritation reports; heavier stability burden; not sellable in the EU as formulated |
The buyer takeaway is that concentration is a claim, and claims need documentation. Ask your OEM partner for the actual percentage and the raw material certificate of analysis (COA). "Kojic acid" on the front panel is marketing; the COA and the formula sheet are what make it true.
Kojic acid is one of the harder actives to keep looking consistent, which is precisely why brands underestimate the system around it.
The oxidation pathway. Kojic acid slowly oxidizes to kojic lactone, and the color of a formula containing it drifts from white or clear toward yellow, amber and eventually brown. Light, heat and time all accelerate the process. The commercial consequence is visible: a "brightening" serum that arrives at the customer looking tea-colored undermines the exact promise the label is making. The standard controls are an opaque or amber container, an air-displacement pump, heat-managed storage in the supply chain, and accelerated stability cycles with color checkpoints at each interval. If a partner quotes a shelf life for a kojic acid platform, ask for the color-appearance column of the stability report, not just the pH column.
The pH window. Kojic acid is most stable in a mildly acidic environment, and formulas built around it commonly land in the low-to-mid pH range. That creates a real design conversation when the kit also carries actives that prefer a different window — niacinamide, for instance, is comfortable across a mildly acidic to neutral range, and our niacinamide ingredient guide walks through that pH logic in detail. A multi-active brightening formula chooses its pH once and has to live with it, so the final number should be a deliberate decision documented in the formula record.
The metal chelation effect. Because kojic acid chelates metals, it can form colored complexes when it contacts iron or copper — from steel surfaces to, in multi-active formulas, other copper-carrying ingredients. Formulators of high-dose kojic acid systems manage equipment contact accordingly, and if your range plans to sit next to a copper peptide line (see our blue copper peptide manufacturer guide), those products stay in separate formulas — nobody cross-doses kojic acid and copper peptides in the same bottle.
Packaging as a stability decision. Clear PET is the wrong choice for a high-dose kojic acid serum; opaque glass or HDPE with a UV-filtering tint is the standard response. For kits, the outer carton is a light barrier for the components that ship inside it — which is why a "savings kit" is not just a price bundle, it is a packaging engineering decision.
What to request from any OEM partner, in writing: the final formula pH, the COA for the kojic acid raw material, the stability protocol (accelerated plus long-term cycles) with color, appearance and odor checkpoints, and the resulting shelf life. A manufacturer that answers all four is treating the formula as a system rather than a shopping list.
The practical reason brands reach for kojic acid is that it is one of the easier brighteners to combine — it pairs with the rest of the tone-evening shelf without forcing a full routine redesign. The pairings that actually need management:
The most common commercial pairing, and a well-matched one: different mechanisms (enzyme chelation versus melanin-transfer and barrier work) and a compatible pH envelope. A kojic acid + niacinamide platform is the standard architecture for a "tone and barrier" line.
Both are acidic actives, so the conversation is pH management rather than incompatibility. In a well-managed formula the two can coexist — the formulator controls the final pH or uses a more stable vitamin C derivative — and the burden of proof sits with the pH data and stability cycles. The conservative position: ask for both before approving a combined serum.
A quieter pair. Glutathione's lane is antioxidant and cellular-defense positioning; it does not fight kojic acid for the same claim. Our glutathione ingredient guide covers where the two sit in a multi-active system, and it is directly relevant to the reference kit in this article, which carries both names in its brief.
Complementary tyrosinase-inhibiting brighteners, often combined. Note that the same 2024 EU amendment that capped kojic acid also set conditions for these: alpha arbutin at 2% max in face creams and 0.5% in body lotions, arbutin at 7% max in face creams, with hydroquinone required to remain at unavoidable trace levels. A "triple brightening" EU formula now has three percentage numbers to satisfy at once — the formula sheet must show all three.
Retinol is a legitimate companion for a brightening range (texture plus tone), but it adds irritation load, so the routine-level answer is often AM brightener / PM retinoid, and EU-bound retinols carry their own 0.3% Retinol-Equivalent ceiling from the same 2024 regulation. Hydroquinone is the one brightener that is simply not on the EU table — it is prohibited in cosmetics — which is a large part of why kojic acid and the arbutins remain the permitted alternatives lane in European formulas.
| Co-active | Interaction to manage | Typical formulation response |
|---|---|---|
| Niacinamide | Minimal — compatible pH envelope | Standard combination; confirm final pH |
| Vitamin C | Shared acidity; pH of the C phase | Control final pH, or use a stable derivative |
| Glutathione | Minimal — different claim lane | Standard inclusion in multi-active systems |
| Alpha arbutin / arbutin | Multiple EU caps in one formula | All three percentage limits must be documented |
| Retinol | Irritation burden; EU 0.3% RE ceiling | AM/PM routine split; document the retinol equivalent |
The pattern across the table is the same as in our other ingredient guides: compatibility is not a property of the ingredient pair, it is a property of the finished formula. That distinction is what separates a supplier that formulates from one that assembles.
Let's make this concrete with the reference product: Lanthome's Green Avocado Kojic Acid and Glutathione Face Care Kit.
The platform is a private label skin care set, model CP56-SP (product reference 1601619307277), for the face, with OEM customization supported. The listing's positioning is a multifunctional set with anti-aging and skin brightening effects — both written as appearance language, which is the register a compliance-ready label needs. The set ships in a green presentation with component sizes spanning 30, 50, 90, 100 and 200 ml, which is the range that lets a buyer build a kit business model: a 30 ml serum for the trial tier, a 90–100 ml cream for the core SKUs, and a 200 ml bottle for the home-care anchor, all under one visual identity.
Read as an architecture, the specification divides the claim lanes deliberately:
Two buyer questions come straight from the product page itself, and they are the questions every serious buyer should ask about any kit: first, kojic acid and glutathione both appear in the kit brief, but their presence and allocation should be confirmed for each individual component before they are highlighted on labels — a kit name is not an ingredient guarantee for every bottle inside the box. Second, the collection name does not establish a tested UV-protection product; the kit as listed does not include a dedicated sunscreen component, so the routine guidance that ships with it should point buyers to a sunscreen — the Sunscreen collection covers that adjacent need. For a brand, that second point is a feature: a brightening kit without a sunscreen claim has one fewer regulatory surface, and a cross-sell built into the routine.
The sizing structure is worth a second look. Five fill options (30 to 200 ml) in one set means the BOM, the carton and the label family are designed for a range, not a single SKU — which is exactly how a "savings kit" earns its name at the factory level.
If this shape fits your plan, the Skin Care Set collection shows the full range of coordinated private label kits available for customization, from brightening sets to hydrating gift boxes.
Before you commit a kojic acid product or kit to production, put these questions in writing:
These questions do not cost anything to ask, and they filter out most of the suppliers that cannot answer them. You can reach the Lanthome team directly through the Contact Us page — a formula question with a concentration, a pH and a target market attached gets a faster, sharper answer than a generic inquiry. And if you want to understand what the manufacturing side of this looks like — factory capabilities, project structure, how OEM/ODM engagements are organized — the About Us page covers Lanthome's background and services.
What is the maximum kojic acid concentration allowed in EU cosmetics?
One percent in the ready-to-use product, and only in face and hand products used as a skin lightening agent. That restriction comes from Commission Regulation (EU) 2024/996 (Annex III entry 375), based on the SCCS 2022 opinion, and it has been fully in force since 1 November 2025. A 2% kojic acid serum cannot be sold in the EU as formulated — it would need a formula rebuild at or below 1%.
Is kojic acid vegan?
Generally, yes — it is produced by fungal fermentation from plant substrates, which is how the supply chain usually classifies it. Because substrates and culture sources vary between producers, a brand making a vegan claim should confirm the specific raw material chain in writing with the supplier.
Why does a kojic acid product turn brown over time?
Kojic acid slowly oxidizes to kojic lactone, and the color drifts toward amber and brown as light, heat and time do their work. The controls are opaque packaging, air-displacement closures, heat-managed storage and accelerated stability testing with color checkpoints. A partner that can show you the color column of the stability report is managing this as a known variable.
Can kojic acid be used together with vitamin C, niacinamide or glutathione?
In a well-managed formula, yes. Niacinamide and glutathione are straightforward companions; vitamin C requires deliberate final-pH control or a stable derivative. The right question for your supplier is what pH the finished formula runs at and what stability data covers the combination.
Is kojic acid safe in cosmetics?
At the concentrations typical of cosmetic use, it is generally well tolerated, and both the US (CIR) and EU (SCCS) bodies have published assessments of the ingredient. Irritation and contact sensitization are reported more often at higher concentrations or on compromised skin, which is why the lower dose in a daily product is the safer default, and why patch-testing guidance belongs in the consumer instructions.
What is the difference between kojic acid and hydroquinone?
Both act on the melanin pathway, but they differ in mechanism, regulatory status and positioning. Hydroquinone is prohibited in EU cosmetics and prescription-only in most contexts; kojic acid is the permitted alternative lane for cosmetic brightening in the EU, capped at 1% in face and hand products. For brands, the difference is simple: kojic acid stays on the cosmetic side of the line.
How do I launch a private label kojic acid kit?
Start from a kit platform such as the CP56-SP reference in this article, confirm the per-component ingredient allocation, fix the concentration against your target market (1% for EU face products), review the stability and color data, and sample every component before bulk. The sampling round trip is the step that catches most problems cheaply.
About the Author
This article was prepared by the Lanthome skincare manufacturing team, with experience in private label formulation, packaging development, quality control, and international OEM/ODM projects.
