Understanding Fail-Safe vs. Fail-Secure in Industrial Valves and Actuators
With industrial process control, safety and reliability often hinge on a single design choice: whether a valve or actuator should be fail-safe or fail-secure. This distinction determines how critical equipment behaves during a power outage, loss of control signal, or other fault condition. This can mean the difference between containing a hazard and creating one. Safety engineers, plant managers, and compliance officers must understand these modes to ensure systems not only meet operational goals but also adhere to industry regulations such as ASME, NFPA, and ISA standards.
Fail-safe designs are built to move to a safe position, often fully closed or vented, when power or control is lost, minimizing risk to people, equipment, and the environment. Fail-secure designs, on the other hand, are intended to maintain their last position during a fault, preserving process integrity or preventing contamination in certain applications. Knowing which to choose isn’t just a technical decision; it’s a strategic one that impacts safety, production uptime, and compliance. In this article, we’ll break down the differences, explore real-world examples, and outline the factors that should guide your selection.
What Does “Fail-Safe” Mean?
In industrial valve and actuator design, fail-safe refers to a configuration that automatically moves the equipment to a predefined safe position when power, air supply, or control signal is lost. The idea is to minimize potential hazards to people, equipment, and the environment in the event of a fault or emergency.
A fail-safe valve or actuator is usually equipped with a spring-return mechanism or other stored-energy device that drives the valve to its safe state, commonly a fully closed or fully open position, depending on the application. For example, in a gas-fired boiler system, a fail-safe gas shutoff valve will close when control power is lost, cutting off fuel to prevent an uncontrolled burn.
Fail-safe operation is often mandated in applications involving hazardous fluids, high-pressure steam, or combustible gases. It’s also a core requirement in many industry standards such as NFPA 86 (Ovens and Furnaces) and API 6D (Pipeline Valves). The “safe” position is defined during system design based on what action will most effectively prevent injury, equipment damage, or environmental release.
In short, fail-safe means the equipment’s default state during a fault is the one that best protects safety, even if that interrupts production.
What Does “Fail-Secure” Mean?
Fail-secure refers to a design where a valve or actuator will remain in its last operating position when power, air supply, or control signal is lost. The goal is to preserve process integrity, prevent contamination, or maintain a critical condition even during a system fault.
In many cases, fail-secure is achieved through mechanical locking, gear retention, or holding torque from a motorized actuator. For example, in a water treatment process, a fail-secure valve may stay open during a power outage to ensure continuous flow to essential systems. In other applications, such as certain chemical processes, keeping a valve closed when control power is lost can prevent costly product loss or unwanted mixing of materials.
Fail-secure designs are typically used when an immediate change in valve position during a fault could cause more harm than maintaining the current state. These applications are often found in industries such as food and beverage, pharmaceuticals, and manufacturing where product quality and process stability are priorities.
In summary, fail-secure means the equipment’s default state during a fault is to hold its position to protect the process, even if that means delaying changes until the system can be restored.
Key Differences Between Fail-Safe and Fail-Secure
Choosing between fail-safe and fail-secure operation is not simply a matter of preference. It is a decision that impacts system safety, production continuity, and regulatory compliance. The table below outlines the key differences between the two approaches.
| Feature | Fail-Safe | Fail-Secure |
|---|---|---|
| Definition | Moves to a predefined safe position when power or control is lost | Holds its last position when power or control is lost |
| Primary Goal | Protect people, equipment, and environment | Preserve process integrity and stability |
| Typical Mechanism | Spring-return actuator, stored energy device | Mechanical lock, gear retention, or motorized holding torque |
| Common Safe Position | Fully closed or fully open, based on hazard prevention | Maintains whatever position it was in prior to power loss |
| Typical Applications | Gas shutoff valves, steam isolation valves, hazardous fluid containment | Continuous process flows, product quality preservation, contamination prevention |
| Industry Requirements | Often mandated by NFPA, ASME, API in hazardous applications | Selected based on process needs rather than mandated safety codes |
| Impact on Production | May halt operations during fault conditions | Keeps operations stable until system is restored |
Selection Factors
Choosing between fail-safe and fail-secure operation involves balancing safety, process requirements, and compliance obligations. The decision should be made during the design phase and reviewed whenever system modifications are planned. Key factors to consider include:
1. Nature of the Process
If the process involves hazardous fluids, combustible gases, or high-pressure steam, fail-safe operation is typically preferred to ensure immediate isolation during a fault. If product integrity or continuous flow is critical, fail-secure may be the better choice.
2. Risk Assessment
Perform a hazard analysis to determine which failure mode minimizes danger to personnel, equipment, and the environment. This step often reveals whether a safety-first shutdown or a continuity-first hold is appropriate.
3. Regulatory Requirements
Check NFPA, ASME, API, ISA, and ISO standards applicable to your industry. In many cases, codes will mandate the fail-safe option for safety-critical applications.
4. Power and Utility Reliability
Consider how often your facility experiences outages or pressure drops. Frequent loss of power may favor designs that reduce risk automatically without relying on manual intervention.
5. Maintenance and Lifecycle Costs
Fail-safe mechanisms with spring-return designs may require periodic spring replacement or testing, while fail-secure systems may need regular verification of locking or holding capability.
6. Integration with Control Systems
Evaluate how the actuator or valve interfaces with your PLC, DCS, or safety instrumented system. Some processes may require additional sensors or interlocks to ensure the selected failure mode functions correctly.
Major Brands, Series, and Sample Part Numbers
| Type | Brand | Series | Sample Part Numbers | Notes |
|---|---|---|---|---|
| Fail-Safe | Honeywell | Modutrol IV Spring-Return Actuators | M7284C1000, M7285C1000 | Spring-return design drives to safe position on power loss |
| Fail-Safe | Belimo | Spring-Return Damper Actuators | AF24-SR, LF120-S | Common in HVAC and ventilation shutdown systems |
| Fail-Safe | ASCO (Emerson) | 8210 Solenoid Shutoff Valves | 8210G094, 8210G095 | De-energized valve closes to stop fuel or fluid flow |
| Fail-Safe | Rotork | K-TORK Pneumatic Actuators | KT13-SR, KT23-SR | Spring-return pneumatic actuators for process safety |
| Fail-Safe | AUMA | FQM Spring-Return Electric Actuators | FQM-05-SR, FQM-10-SR | Designed for emergency shutdown of critical valves |
| Fail-Secure | AUMA | SA Multi-Turn Actuators | SA10.1, SA14.1 | Holds position when power is lost, common in water treatment |
| Fail-Secure | Siemens | OpenAir Non-Spring Return Actuators | GEB336.1E, GIB336.1E | Maintains last position in HVAC or damper applications |
| Fail-Secure | Limitorque | MX Electric Actuators | MX-85, MX-140 | Holds valve position, common in oil & gas pipelines |
| Fail-Secure | Flowserve | Logix Digital Positioners | Logix 3800, Logix 500 | Maintains setpoint in process control loops |
| Fail-Secure | Metso | Neles Series E Electric Actuators | NE700, NE800 | Designed for precise position holding in manufacturing lines |
Code Compliance and Industry Standards
Selecting fail-safe or fail-secure operation is not only a technical choice but, in many cases, a compliance requirement. Industry codes and standards often dictate how a valve or actuator must respond during a fault, particularly in applications involving hazardous materials, high pressures, or critical process control.
For example, NFPA 86 (Standard for Ovens and Furnaces) requires that fuel shutoff valves in combustion systems be fail-safe, meaning they must close automatically on loss of power or control. Similarly, ASME Boiler and Pressure Vessel Code includes provisions that call for fail-safe actuation in steam and high-pressure systems to protect both equipment and personnel. The API 6D standard for pipeline valves specifies operational requirements for emergency shutdown systems, which often mandate fail-safe positioning.
On the other hand, certain ISA (International Society of Automation) guidelines and ISO 5211 actuator mounting standards leave room for fail-secure operation when maintaining process continuity is critical and does not pose an immediate hazard.
In regulated industries such as oil and gas, food and beverage, and pharmaceuticals, engineering decisions must align with both operational needs and applicable safety codes. Consulting the relevant standards during the design phase ensures that the choice between fail-safe and fail-secure not only meets performance goals but also passes inspection without costly retrofits.
Conclusion and Recommendations
Understanding the difference between fail-safe and fail-secure operation in valves and actuators is essential for building safe, reliable, and code-compliant industrial systems. Fail-safe designs protect personnel, equipment, and the environment by moving to a predetermined safe position during a fault. Fail-secure designs preserve process stability by holding the last known position until control is restored.
Choosing the correct approach depends on your process hazards, industry regulations, and operational priorities. When safety and compliance are the primary concerns, fail-safe is often the required choice. When process continuity is more critical than immediate shutdown, fail-secure can be a better fit.
Before selecting equipment, review applicable NFPA, ASME, API, ISA, and ISO standards. Work with trusted brands and ensure your components integrate seamlessly with your control systems. TCI Supply offers a wide range of fail-safe and fail-secure valves and actuators from leading manufacturers, with technical support to help you choose the right product for your specific application.
FAQ: Fail-Safe vs. Fail-Secure Valves and Actuators
What does fail-safe mean in valve and actuator design?
Fail-safe means the equipment moves to a predetermined safe position, such as fully closed or fully open, when power or control is lost. This is intended to minimize hazards and protect people, equipment, and the environment.
What does fail-secure mean?
Fail-secure means the equipment remains in its last position when power or control is lost. This design preserves process stability and product integrity until the system can be restored.
Which is safer: fail-safe or fail-secure?
Fail-safe is generally safer in hazardous applications because it moves equipment to a condition that reduces immediate risk. Fail-secure can be safer in processes where sudden changes could cause contamination or other issues.
Do industry codes require fail-safe operation?
Many industry standards such as NFPA 86 and ASME Boiler and Pressure Vessel Code require fail-safe operation in safety-critical applications. Always review applicable codes before selecting equipment.
Can a single system use both fail-safe and fail-secure devices?
Yes. Some systems use a mix of fail-safe and fail-secure devices depending on the function of each component and its role in overall system safety and performance.