California Security Deposit Law: A 2026 Owner’s Guide

Security deposits are where a lot of well-meaning California owners accidentally break the law — and the penalties for getting it wrong are steep. The rules changed significantly in the last couple of years: deposits are now capped lower, and as of 2025 you have to photograph the unit to justify almost any deduction. If you’re renting out a home in Orange County, here’s what you can charge, what you can deduct, and what you must return in 2026.

This article is general information, not legal advice. Security deposit law (California Civil Code §1950.5) is detailed and some cities add their own rules. For your specific situation, consult a California landlord-tenant attorney and check the official California Courts self-help center.

How much you can charge: the one-month cap (AB 12)

This is the big change. As of AB 12 (effective July 1, 2024), the maximum security deposit is one month’s rent — for both furnished and unfurnished units. The old 2-months-unfurnished / 3-months-furnished limits are gone, and there are no pet or furnished exceptions to the cap. The small-landlord exception: you may charge up to two months’ rent only if both are true:

• You own no more than two residential rental properties that collectively have no more than four units, and
• You’re a natural person (or an LLC where every member is a natural person).

One hard exception to that exception: if your prospective tenant is an active-duty service member, the cap is always one month’s rent, regardless of the small-landlord rule. So for most Orange County owners with a single rental, the practical answer is simple: one month’s rent.

What you can — and can’t — deduct

When the tenancy ends, you can only deduct from the deposit for three things:

1. Unpaid rent.
2. Cleaning to return the unit to the same level of cleanliness it was in at move-in (not better).
3. Repair of damage beyond normal wear and tear.

The line that trips owners up is “normal wear and tear,” which is never deductible. California treats deterioration from ordinary use as your cost of doing business, not the tenant’s. Charging a tenant for normal wear and tear — repainting just because it’s been a few years, or new carpet for light wear — is a per-se illegal deduction.

The 21-day rule (miss it and you forfeit everything)

After the tenant moves out, you have 21 calendar days to return the deposit. The clock starts when the tenant vacates — not the lease end date, not when keys come back, not when repairs finish. Within those 21 days you must deliver:

• The remaining deposit balance, and
• An itemized statement listing each deduction, the reason, and the cost, and
• Receipts or good-faith estimates for any deduction over $125.

The itemization has to be specific — “cleaning” or “repairs” isn’t enough. Write it like: “Professional carpet cleaning, living room + 2 bedrooms, pet stains — ABC Carpet — $250.”

Miss the deadline, forfeit the deposit. If you miss the 21-day window or send a defective statement, you can forfeit the right to keep any of the deposit and have to return it in full. Bad-faith retention can expose you to statutory damages of up to twice the deposit amount on top of returning it.

The new photo requirement (AB 2801) — this is easy to miss

As of 2025, AB 2801 requires photographic evidence to justify deductions, phased in:

• Since April 1, 2025: you must take photos of the unit after the tenant moves out but before any repairs/cleaning, and again after the repairs/cleaning are done — for any deduction you make.
• For leases starting July 1, 2025 or later: you must also take move-in photos, and provide the tenant those photos along with the itemized statement within the 21 days.

AB 2801 also reinforces that you can’t charge for cleaning beyond returning the unit to its move-in condition. Bottom line for 2026: no photos, no deduction. If you can’t document it with before/after images, don’t deduct for it.

How to protect yourself (and your deposit deductions)

• Document move-in and move-out thoroughly — dated photos and a signed condition checklist at both ends. This is now legally required and your best evidence if a deduction is ever disputed.
• Keep every receipt for cleaning and repairs, especially anything over $125.
• Calendar the 21 days the moment the tenant vacates.
• Itemize specifically — vendor, service, cost, per line.
• When in doubt, don’t deduct. The downside of an aggressive deduction (forfeiting the whole deposit plus penalties) dwarfs the cost of the item.

This is exactly the kind of compliance that quietly eats owners who self-manage — it’s detailed, it changed recently, and the penalties are real. Handling deposits correctly (compliant move-in/move-out documentation, photo evidence, and on-time itemized statements) is part of what we do on every Bear-managed property. You can see how our leasing and reporting process works on our services and pricing page, and how we stand behind our work in the Bear Promise. If you also want the rent-cap side of California law, see our guide to AB 1482 for OC landlords.