FirstHR

What Is Work Authorization? A Guide for Small Business Employers

Work authorization is the legal right to work in the US. What it means for employers, how to verify it via I-9, and how to build it into onboarding.

Nick Anisimov

Nick Anisimov

FirstHR Founder

Hiring
10 min

What Is Work Authorization?

Plain-English guide for small business employers verifying new hires

If you are hiring your first or second employee, the phrase "work authorization" probably appeared on the I-9 form, in a job posting template, or in a compliance guide. And your immediate question was: what does this actually mean, and what do I need to do about it?

The short answer: work authorization is the legal right to be employed in the United States. Every employer must verify it for every new hire, regardless of company size. This guide explains what work authorization means for employers, how to verify it correctly through the I-9 process, what documents count as proof, and how to build the verification step into your onboarding workflow so you never miss a deadline or a compliance requirement.

TL;DR
Work authorization is the legal right to work in the US, held by citizens, permanent residents, and non-citizens with valid work permits or employment visas. Every US employer must verify work authorization for every new hire using Form I-9 within 3 business days of the first paid day of work. You cannot ask for specific documents (that is document abuse). You cannot discriminate based on citizenship status. Penalties for I-9 violations range from $252 to $2,507 per form.

What Is Work Authorization?

Definition
Work Authorization
Work authorization is the legal right of an individual to be employed in the United States. It is held by US citizens (by birth or naturalization), lawful permanent residents (green card holders), and non-citizens who have been granted an Employment Authorization Document (EAD), a work visa (H-1B, L-1, O-1, TN, etc.), or other government-issued permission to work. Every employer must verify work authorization for every new hire through the I-9 verification process, regardless of company size.

For employers, work authorization is not an immigration question. It is a compliance question. You are not required to understand immigration law, determine visa categories, or assess someone's eligibility for a green card. You are required to do one thing: verify that every person you hire is authorized to work in the United States by completing Form I-9 correctly and on time. The new hire paperwork guide covers the full set of required employment documents including I-9.

Who Has Work Authorization in the United States

CategoryHow They Got Work AuthorizationVerification Document (I-9)Reverification Needed?
US citizens (born in US or naturalized)By birth or through naturalization processUS passport or passport card (List A), OR birth certificate (List C) + photo ID (List B)Never
Lawful permanent residents (green card holders)Through family, employment, or other immigration petitionPermanent Resident Card (List A)No, unless card has expiration date (conditional 2-year card)
Non-citizens with EAD (Employment Authorization Document)USCIS grants EAD for specific categories (asylum applicants, DACA, certain visa holders' spouses)EAD card (List A)Yes, when EAD expires. 540-day auto-extension applies if renewal filed timely.
Non-citizens with employment visa (H-1B, L-1, O-1, TN, etc.)Employer-sponsored visa petition approved by USCISForeign passport + I-94 + visa stamp (List A)Yes, when visa status expires
Non-citizens with other authorizationRefugees, asylees, TPS holders, and other specific categoriesEmployment Authorization Document or other USCIS-issued document (List A)Yes, per document expiration

The critical point for employers: you do not need to determine which category a new hire falls into. You do not need to understand their immigration status. You need to examine the documents they present, verify they appear genuine and relate to the person, and complete I-9 Section 2. The employee chooses which documents to present. You cannot request specific documents or reject valid documents because you prefer a different one. The E-Verify FAQ provides the official DHS definition of work authorization.

Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It Works

The 3 Things Every Employer Must Do

1
Verify within 3 business days of the first paid day
The new hire completes I-9 Section 1 on or before their first day of work. You (or your authorized representative) examine original identity and work authorization documents and complete Section 2 within 3 business days of the first day of paid employment. Not 3 days from the offer. Not 3 days from the interview. Three business days from Day 1.
2
Do not discriminate based on citizenship or national origin
Under IRCA (Immigration Reform and Control Act), you cannot treat candidates differently based on citizenship status, national origin, or the specific documents they present. You cannot require a US passport instead of accepting a driver's license plus Social Security card. You cannot refuse to hire someone because their work authorization has an expiration date. You cannot ask 'Are you a US citizen?' in an interview (ask 'Are you authorized to work in the United States?' instead).
3
Do not knowingly hire or continue to employ unauthorized workers
If you have actual knowledge that an employee is not authorized to work, you must terminate the employment. 'Actual knowledge' means direct evidence, not suspicion. You are not required to be an immigration expert or to investigate an employee's status beyond the I-9 process. Complete the I-9 correctly, accept documents that reasonably appear genuine, and you have met your legal obligation.
Document Abuse: The Most Common Employer Mistake
You cannot ask a new hire for specific documents. Saying "bring your passport on Day 1" is document abuse under IRCA, even if you are trying to be helpful. The employee chooses which documents to present from the I-9 acceptable documents list. They can present one List A document (proves both identity and work authorization) OR one List B document (identity) plus one List C document (work authorization). You must accept any valid combination.

What Counts as Proof of Work Authorization

ListWhat It ProvesCommon Examples
List A (one document)Both identity AND work authorizationUS passport, US passport card, Permanent Resident Card (green card), Employment Authorization Document (EAD), foreign passport with I-94
List B (one document)Identity only (must pair with List C)State driver's license, state ID card, school ID with photo, voter registration card, US military card
List C (one document)Work authorization only (must pair with List B)Social Security card (unrestricted), birth certificate (US), Certificate of Citizenship, Certificate of Naturalization

The most common combination for US citizens: driver's license (List B) plus Social Security card (List C). The simplest option: a US passport (List A alone). For non-citizens: the Employment Authorization Document or foreign passport with I-94 (List A). You cannot reject a valid document because it looks unfamiliar or because you are unsure about a visa category. If the document reasonably appears genuine and relates to the person presenting it, you must accept it. The compliance onboarding guide covers the full set of federal employment compliance requirements.

Fitting Work Authorization Verification Into Your Onboarding Workflow

Work authorization verification is not a standalone task. It is one step in the onboarding workflow that includes offer acceptance, paperwork collection, Day 1 orientation, and the first 90 days. Here is how it fits.

WhenWhat HappensWho Does It
Offer accepted (Day -3 to -7)Send preboarding email with list of acceptable I-9 documents (Lists A, B, C). Do NOT specify which documents to bring.Founder / office manager (automated via onboarding platform)
Day 1 (first paid day)New hire completes I-9 Section 1: personal information, attestation of work authorization status, signature.New hire (self-service portal or paper form)
Day 1 to Day 3Employer or authorized representative examines original documents in person, completes Section 2: document details, certification, signature.Founder / office manager / authorized representative
OngoingStore completed I-9 in a separate folder (not in the employee's personnel file). Retain for the later of 3 years from hire date or 1 year from termination.Document management system
EAD/visa expiration approachingReverify work authorization before document expires. Use Section 3 of I-9 or a new I-9. Do NOT reverify US citizens or permanent residents.Founder / office manager (calendar reminder or automated alert)

This workflow takes 20 to 30 minutes per hire when done correctly. Most of the time is spent examining documents and completing Section 2. The onboarding checklist includes I-9 verification as a Day 1 task with a Day 3 deadline reminder. I built the task workflow in FirstHR to enforce this timeline automatically: Section 1 is collected via self-service portal, Section 2 has a deadline-triggered reminder, and the completed form is stored in an encrypted folder with the correct retention rule. The onboarding process guide covers the full Day 1 to Day 90 structure.

Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in Action

E-Verify: Do You Need It?

E-Verify is a free online system that compares I-9 information against DHS and SSA records to confirm work authorization. It is mandatory for some employers and optional for others.

Who Must Use E-VerifyThreshold
Federal contractors and subcontractorsAll, per FAR E-Verify clause
Alabama employersAll employers
Arizona employersAll employers
Florida employers25+ employees (effective July 2023)
Georgia employers11+ employees (public) / 500+ (private as of 2025 expansion)
Mississippi employersAll employers
North Carolina employers25+ employees
South Carolina employersAll employers
Tennessee employers35+ employees (non-E-Verify employers must use affidavit process)
Utah employers15+ employees

If you are not in a mandatory state and not a federal contractor, E-Verify is optional. Many small business founders choose to opt in anyway for two reasons: it provides an additional layer of verification that strengthens your audit defense, and it enables remote document examination (the DHS alternative procedure). The compliance hub provides state-by-state requirements including E-Verify mandates.

Common Work Authorization Mistakes Small Employers Make

Completing Section 2 late. The most common I-9 violation. Section 2 must be completed within 3 business days of the first day of paid employment. Not "when we get around to it." Not "at the end of the first week." Three business days. Penalties: $252 to $2,507 per form for the first offense.

Asking for specific documents. "Bring your passport on your first day" is document abuse. The employee chooses which documents to present. You can provide the list of acceptable documents (the I-9 instructions include it) but cannot direct the employee to a specific document or combination.

Over-documenting. Some employers photocopy documents "just in case." If you photocopy for some employees but not others, you create evidence of discriminatory practice. Either photocopy for everyone or no one. E-Verify employers who use the alternative remote procedure must retain copies.

Storing I-9 forms in personnel files. I-9 forms must be stored separately from employee personnel files so they can be produced quickly during an ICE audit without exposing other employee records. Keep all I-9s in one dedicated folder (physical or digital), organized by current vs terminated employees.

Not reverifying when EAD expires. If a non-citizen employee's EAD has an expiration date, you must reverify their work authorization before it expires using I-9 Section 3. Failure to reverify means you may be continuing to employ an unauthorized worker, which carries penalties of $698 to $5,579 per employee. The new hire reporting guide covers the related state reporting requirements.

When You Actually Need an Immigration Lawyer

For most domestic hires (US citizens and permanent residents), you do not need a lawyer. The I-9 process is straightforward and well-documented by USCIS. You need a lawyer in three situations.

First, if you want to sponsor a foreign national for an employment visa (H-1B, O-1, L-1). Visa sponsorship involves petitions, labor condition applications, prevailing wage determinations, and strict deadlines. This is not a DIY process.

Second, if you receive a Notice of Inspection from ICE. An ICE audit means federal agents will examine your I-9 forms. Contact an immigration attorney immediately. Do not attempt to "fix" I-9s before the audit.

Third, if you have reason to believe an employee's documents are fraudulent. Do not confront the employee or investigate on your own. Consult a lawyer to understand your obligations and protect yourself from liability.

For everything else (completing I-9 for domestic hires, understanding List A/B/C documents, setting up your verification process, and building the workflow into onboarding), a lawyer is not necessary. A well-structured onboarding platform with I-9 task tracking, document storage, and deadline reminders handles the compliance requirements that most small businesses face. The human resource laws guide covers the full set of federal employment laws by company size threshold.

Key Takeaways
Work authorization is the legal right to work in the US, held by citizens, permanent residents, and non-citizens with valid permits or visas. Every employer must verify it for every hire via Form I-9.
Complete I-9 Section 1 on or before Day 1. Complete Section 2 (document examination) within 3 business days. Late completion is the most common violation: penalties start at $252 per form.
Do not ask for specific documents. The employee chooses from the I-9 acceptable documents list. Requesting a passport instead of accepting a driver's license plus Social Security card is document abuse.
Store I-9 forms separately from personnel files. Retain for the later of 3 years from hire date or 1 year from termination. Keep current and terminated employee I-9s organized for audit readiness.
E-Verify is mandatory in 10+ states and for federal contractors. If not mandatory for you, consider opting in for audit defense and remote verification capability.
You do not need a lawyer for standard domestic hires. You need one for visa sponsorship, ICE audits, or suspected document fraud.

Frequently Asked Questions

Is a green card work authorization?

Yes. A green card (Permanent Resident Card, Form I-551) is both proof of identity and proof of work authorization. It is a List A document on the I-9 form, meaning it satisfies both requirements on its own. Green card holders have unrestricted work authorization in the United States. You do not need to reverify their authorization unless the card has an expiration date, which applies to conditional residents with 2-year cards.

Is work authorization the same as a work permit?

Not exactly. Work authorization is the broader legal right to be employed in the United States. A work permit (Employment Authorization Document, or EAD) is one specific type of document that grants work authorization to non-citizens who do not have it through a visa or permanent residency. All US citizens and green card holders have work authorization without a work permit. Non-citizens with certain visa types (H-1B, L-1, O-1) have work authorization through their visa, not through an EAD.

How do I verify work authorization remotely?

As of 2023, DHS introduced an alternative remote verification procedure for E-Verify employers. If you participate in E-Verify, you may examine I-9 documents remotely via video call and retain copies. If you do not participate in E-Verify, you must examine original documents in person. The employee completes Section 1 on or before their first day of work. You complete Section 2 by examining original documents within 3 business days. An authorized representative (notary, accountant, attorney) can examine documents on your behalf if the employee works at a remote location.

What is the difference between work authorization and employment authorization?

They mean the same thing. 'Work authorization' and 'employment authorization' are used interchangeably in US immigration and employment law. USCIS uses 'employment authorization' in official documents (Employment Authorization Document, Form I-766). Employers and HR professionals commonly use 'work authorization' in job postings and onboarding processes. Both refer to the legal right to be employed in the United States.

How long is work authorization valid?

It depends on the type. US citizens and lawful permanent residents with 10-year green cards have indefinite work authorization. Conditional residents (2-year green cards) have authorization for the card's validity period. EAD holders have authorization for the period printed on the card (typically 1-2 years, with a 540-day auto-extension upon timely renewal filing). Visa-based work authorization (H-1B, L-1, O-1) lasts for the visa validity period. Employers must reverify work authorization for documents with expiration dates, but cannot reverify for US citizens or permanent residents with unexpired 10-year cards.

Ready to transform your onboarding?

7-day free trial No credit card required
Start Your Free Trial