Every year, workers are seriously injured or killed by machinery and equipment that was assumed to be safe. Not broken, not malfunctioning, simply assumed to be off. The unexpected release of stored energy during maintenance, cleaning, or repair is one of the leading causes of severe workplace injuries, and it is almost entirely preventable. Lockout/tagout, often abbreviated as LOTO, is the system designed to eliminate that risk entirely. Mastering it is not a bureaucratic exercise. It is the difference between going home at the end of a shift and not going home at all.
What Lockout/Tagout Actually Means
Lockout/tagout is a safety procedure used to ensure that dangerous machines and equipment are properly shut off and cannot be started up again before maintenance or servicing work is completed. The lockout portion involves physically applying a lock to an energy-isolating device, such as a circuit breaker, valve, or disconnect switch, in a way that prevents the machine from being energized. The tagout portion involves attaching a warning tag that communicates clearly to others that the equipment is being serviced and must not be operated.
The fundamental goal is to achieve a state of zero energy, a condition in which every source of hazardous energy connected to a piece of equipment has been isolated, discharged, blocked, or restrained. This includes not just electrical energy but also hydraulic pressure, pneumatic pressure, mechanical spring tension, thermal energy, chemical energy, and gravitational potential in elevated components. Every one of these energy forms is capable of causing severe injury if released without warning during maintenance work.
The Energy Sources That Workers Most Often Overlook
Electrical energy is the most obvious hazard, and most workers who receive any LOTO training at all understand the importance of de-energizing electrical systems before working on them. What is less well understood is the risk posed by residual or stored energy in other forms. A hydraulic press that has been powered down may still hold thousands of pounds of pressure in its lines. A pneumatic system that has been shut off at the compressor may retain enough stored pressure in its accumulator to drive a ram with lethal force. A compressed spring in a mechanical system can release its energy in a fraction of a second.
Gravity is another hazard that is routinely underestimated. Any elevated component, a raised lift, a suspended load, a hydraulic platform held up by fluid pressure, represents stored gravitational energy that will release the moment support is lost. Proper LOTO procedure requires that these components be mechanically blocked or lowered to a safe position before work begins, not simply held in place by a system that is now considered de-energized.
The Step-by-Step LOTO Process
An effective lockout/tagout procedure follows a consistent sequence that leaves nothing to assumption. The process begins with preparation, identifying all energy sources connected to the equipment, locating all isolation points, and gathering the correct locks, tags, and any additional hardware needed for the job. No step in a LOTO procedure should ever be improvised on the fly.
Once prepared, the equipment is shut down using its normal stopping procedure. Energy-isolating devices are then engaged at every identified isolation point, and a personal lock is applied to each one by the worker performing the service. The worker holds the only key. Tags are attached at each lockout point communicating that the equipment is locked out and identifying who applied the lock. After all locks are applied, stored energy is released or restrained through venting, draining, blocking, or bleeding as appropriate. Finally, before any work begins, the worker verifies the zero-energy state by attempting to start the machine using its normal controls and confirming that all energy gauges read zero.
Why Personal Locks Matter So Much
One of the most critical principles in a sound LOTO program is the requirement that each worker apply their own personal lock to every energy isolation point on the equipment they are servicing. This is not a formality. It is the mechanism by which each worker maintains sole control over their own safety. If multiple workers are servicing the same piece of equipment, each one applies their own lock, and the equipment cannot be re-energized until every individual lock has been removed by its owner.
A system in which one person locks out equipment on behalf of a crew introduces a single point of failure. If that person leaves the work area, finishes their portion of the job, or simply forgets that others are still working, the locks may be removed before everyone is clear. Personal locks eliminate this vulnerability by making each worker’s safety dependent entirely on their own device and their own key.
Training, Documentation, and Program Management
A lockout/tagout program is only as strong as the training behind it. Workers need to understand not just the mechanics of applying a lock and tag but the reasoning that makes each step essential. They need to be able to identify every energy source on the equipment they work with, locate every isolation point, recognize the signs that a machine has not been fully de-energized, and know what to do if they discover a lock applied by someone whose whereabouts are unknown.
OSHA’s standard for the control of hazardous energy, found at 29 CFR 1910.147, requires that employers develop written LOTO procedures for each piece of equipment, conduct initial training for all authorized and affected employees, and perform periodic inspections of the program at least annually. Documentation is not just a regulatory requirement. It is a tool for catching gaps in the program before those gaps result in an injury. Well-maintained records of training, inspections, and incident near-misses give safety managers the information they need to strengthen procedures over time.
Common Mistakes That Put Workers at Risk
Even in workplaces with established LOTO programs, certain mistakes appear with troubling regularity. One of the most common is skipping verification. Workers who have completed the lockout steps correctly but fail to attempt a test start before beginning work are relying on faith rather than confirmation. Isolation devices can be applied to the wrong point, left partially engaged, or simply fail. Verification is the step that catches these errors before they cause harm.
Another frequent mistake is the use of tagout alone when lockout is physically achievable. A tag is a warning, not a physical barrier. It can be ignored, removed, or missed entirely. A lock physically prevents the re-energization of equipment regardless of whether someone reads the tag. When both options are available, lockout is always the appropriate choice. Tagout-only programs are permitted by OSHA only when the energy-isolating device is not capable of being locked, and this exception should be the exception in practice, not the routine.
A Final Thought
Lockout/tagout is not complicated, but it requires discipline, consistency, and a genuine respect for the forces that industrial equipment holds in check. The moment a worker treats LOTO as a bureaucratic hurdle rather than a life-saving protocol is the moment the system becomes unreliable. Zero energy is not a slogan. It is a measurable, verifiable state that every worker servicing equipment deserves to confirm before the work begins. Master the process, apply it without exception, and it will protect you every single time.