Lockout/tagout, commonly called LOTO, is a hazardous-energy control process used to prevent the unexpected startup or release of energy while employees perform servicing or maintenance.
For U.S. facilities, the basic concept is straightforward: identify hazardous energy, isolate it, prevent it from being re-energized, release or control stored energy, and verify that the equipment is safe before work begins.
The challenge is applying that concept consistently on the plant floor.
A written LOTO program may look complete on paper, but real facilities have different machines, energy sources, isolation devices, maintenance tasks, employees, contractors, and operating conditions. A procedure that works well for one piece of equipment may not be appropriate for another.
That is why effective LOTO is more than buying a set of padlocks and tags.
It is a connected system involving equipment identification, energy-control procedures, appropriate lockout devices, employee training, verification, inspections, and ongoing program management.
This practical guide explains the fundamentals of LOTO and the key considerations U.S. facilities should address when building or improving an energy-control program.
What Does Lockout Tagout Mean?
Lockout means placing a physical lockout device on an energy-isolating device so that the energy-isolating device cannot be operated.
Tagout involves attaching a warning device to communicate that the equipment must not be operated.
In practice, a LOTO procedure may use both.
For example, a maintenance technician may shut down a machine, isolate its electrical disconnect, apply a lock and tag, release stored pneumatic pressure, and verify that the equipment cannot operate before beginning work.
The purpose is not simply to indicate that maintenance is taking place.
The purpose is to control hazardous energy so employees are protected from unexpected energization, startup, or release of stored energy.
This distinction matters.
A machine that is switched off is not necessarily a machine that has been safely isolated.
Why LOTO Is Necessary
Industrial equipment can contain several forms of hazardous energy.
Common examples include:
Electrical energy
Mechanical energy
Hydraulic pressure
Pneumatic pressure
Thermal energy
Chemical energy
Gravitational energy
Stored or residual energy
A machine can stop moving while energy remains present.
A hydraulic system may retain pressure.
A suspended component may still be held by gravity.
A capacitor may retain electrical energy.
A pneumatic actuator may remain pressurized.
A flywheel may continue to rotate.
These conditions are why simply pressing a stop button is generally not enough to establish a safe maintenance condition.
The employee needs to understand where energy comes from, how it is isolated, and how stored energy is controlled.
That is the practical foundation of LOTO.
LOTO Starts With the Equipment, Not the Lock
One common mistake when developing a LOTO program is starting with the product catalog.
A facility may begin by asking:
“What locks should we buy?”
A better starting question is:
“What energy sources and isolation points do our employees actually need to control?”
Before selecting devices, examine the equipment.
Identify:
The machine or system being serviced
Every hazardous energy source
The energy-isolating devices
Stored or residual energy
Isolation points that can accept a lockout device
Verification methods
The employees who may be affected
This information should drive device selection.
For example, an electrical panel may require a circuit breaker lockout.
A process line may require a valve lockout.
A machine with multiple isolation points may require several devices.
A group maintenance task may require a hasp or group lockbox system.
The correct device depends on the actual application.
Identify Every Energy Source
Energy identification is one of the most important parts of a LOTO procedure.
Do not assume that the primary power source is the only hazard.
Consider a production machine with electrical power, compressed air, hydraulic pressure, and elevated components.
Turning off the main electrical disconnect may stop the motor.
But that does not automatically eliminate pneumatic pressure.
It does not necessarily eliminate hydraulic pressure.
It does not remove gravity-related hazards.
A complete energy-control procedure should identify the different energy sources associated with the equipment and explain how each one is isolated or controlled.
This is where machine-specific procedures become valuable.
A generic statement such as “shut down and lock out the machine” may not provide enough information for a complex system.
Employees need practical instructions they can use at the equipment.
The Basic LOTO Process
Specific procedures should be developed for the equipment and work being performed, but the general energy-control process commonly follows a logical sequence.
1. Prepare for Shutdown
Before shutting down equipment, identify the machine, energy sources, isolation points, and affected employees.
Review the applicable procedure.
Confirm that the correct lockout devices are available.
2. Notify Affected Employees
Employees who operate or work around the equipment should know that maintenance is planned and that the equipment will be removed from service.
This communication helps prevent someone from attempting to restart equipment during maintenance.
3. Shut Down the Equipment
Use the normal stopping procedure for the equipment.
This may involve:
1.Stop controls
2. Shutdown switches
3. Control panels
4.Process shutdown procedures
Normal shutdown is only the beginning of energy control.
4. Isolate Hazardous Energy
Operate the appropriate energy-isolating devices.
Depending on the equipment, this could involve:
1.Circuit breakers
2.Disconnect switches
3.Ball valves
4.Gate valves
5.Pneumatic isolation points
6.Hydraulic isolation points
The device must actually isolate the hazardous energy source.
5. Apply Lockout and Tagout Devices
Authorized employees apply the appropriate lockout devices.
A safety padlock provides personal control.
Tags communicate important information about the lockout condition.
For equipment with multiple isolation points, multiple devices may be necessary.
6. Release or Restrain Stored Energy
This step is often overlooked.
Stored energy may need to be:
1.Discharged
2.Released
3.Blocked
4.Restrained
5.Dissipated
6.Otherwise rendered safe
The appropriate method depends on the equipment and energy source.
7. Verify Isolation
Before work begins, verify that hazardous energy has actually been isolated.
Verification may involve appropriate testing or trying the normal operating controls according to the established procedure, followed by returning controls to the proper position.
The exact verification method should be defined by the facility's procedure and equipment requirements.
The objective is straightforward:
Do not assume isolation. Verify it.
Choosing the Right LOTO Device
Once the energy-control requirements are understood, device selection becomes much easier.
The right device should fit the isolation point and perform its intended function under actual operating conditions.
Several categories are common in industrial LOTO programs.
Safety Padlocks
Safety padlocks are commonly assigned to authorized employees.
Selection considerations can include:
1.Keying system
2.Shackle clearance
3.Material
4.Environmental exposure
5.Identification requirements
6.Number of employees
7.Key management
For a facility with many employees, key control becomes particularly important.
A company should have a clear system for assigning, tracking, replacing, and managing keys.
Circuit Breaker Lockouts
Electrical systems often require circuit breaker lockout devices.
However, not every breaker has the same configuration.
Before purchasing a circuit breaker lockout, check:
1.Breaker design
2.Toggle configuration
3.Handle dimensions
4.Available clearance
5.Lockout attachment method
6.Panel layout
A device that fits one breaker may not fit another.
This is why compatibility should be confirmed against the actual equipment.
When possible, procurement teams should inspect representative equipment before ordering large quantities.
Valve Lockouts
Valves can vary significantly in design and dimensions.
Common applications include:
1.Ball valves
2.Gate valves
3.Butterfly valves
4.Other process-control valves
Selection should consider:
1.Valve type
2.Handle size
3.Handle position
4.Valve dimensions
5.Available clearance
6.Operating environment
A valve lockout should be selected based on the physical characteristics of the isolation point, not simply the name of the valve category.
For facilities with many different valve types, standardization may require several device sizes or designs.
Group Lockout
Maintenance work often involves more than one employee.
A group lockout system helps multiple authorized employees maintain personal control over their protection.
Common approaches can include:
1.Lockout hasps
2.Group lock boxes
3.Multiple personal safety padlocks
The key principle is that each employee should have an appropriate means of maintaining personal control according to the facility's established procedure.
Group LOTO requires careful planning.
Before work begins, the team should understand:
1.Who is involved
2.Who controls the equipment
3.How isolation will be established
4.How individual protection is maintained
5.How employees are added or removed from the group
Keying Systems Matter More Than Many Buyers Expect
When a facility orders safety padlocks, the physical lock is only part of the decision.
The keying structure also matters.
Depending on the program, a facility may use different keying approaches.
For example:
Keyed Different (KD) can provide individual key control, where each lock has its own key.
Keyed Alike (KA) can allow a designated group of locks to operate with the same key.
Other key-control arrangements may be appropriate depending on the organization's procedures.
The correct choice depends on the facility's management requirements, employee assignments, security practices, and LOTO program.
There is no single keying system that is automatically right for every organization.
The important point is to establish a deliberate system rather than ordering locks without considering how they will be managed.
LOTO Is Also an Identification System
A well-organized LOTO program should make it easy to answer basic questions.
What equipment is isolated?
Why is it isolated?
Who is performing the work?
Which energy sources have been controlled?
What procedure applies?
Clear equipment identification and tagging can support these objectives.
For larger facilities, standardized identification becomes increasingly valuable.
Equipment labels, isolation-point markings, tags, procedures, and lockout devices should work together rather than operate as separate systems.
This is where LOTO becomes a facility-wide management process instead of a collection of individual products.
Training Is Part of the System
LOTO equipment cannot replace training.
Employees need to understand their responsibilities and the facility's energy-control procedures.
Training should be appropriate to the employee's role.
For example, employees who perform servicing or maintenance under LOTO requirements may need a deeper understanding of hazardous energy and energy-control procedures than employees who simply operate equipment.
Training should also reflect the actual workplace.
A classroom explanation of LOTO is useful.
But employees should also understand how the procedures apply to the equipment they encounter.
Practical demonstrations, equipment-specific procedures, and scenario-based discussions can help connect training to real work.
Periodic Inspection and Program Review
A LOTO program should not be considered finished once procedures and devices are purchased.
Facilities change.
Machines are modified.
Production lines are reorganized.
Employees change roles.
New equipment is installed.
Procedures can become outdated.
For this reason, facilities should periodically review their energy-control program and inspect how it is being implemented.
Look for practical issues such as:
1.Missing devices
2.Damaged locks or tags
3.Unclear procedures
4.Outdated equipment identification
5.Incomplete isolation information
6.Inventory shortages
7.Employees using inconsistent practices
The goal is not simply to identify problems.
It is to keep the system usable.
Common LOTO Mistakes to Avoid
Several practical mistakes can weaken an otherwise well-designed program.
Starting With Products Instead of Hazards
Buying a large quantity of devices before reviewing actual isolation points can result in poor compatibility or unnecessary inventory.
Using Generic Procedures for Complex Equipment
Complex machines may require detailed, machine-specific energy-control information.
Ignoring Stored Energy
Stopping primary power does not necessarily eliminate every hazard.
Treating Tags as Physical Energy Control
Tags communicate a warning but do not provide the same physical restraint as a lockout device where lockout is feasible.
Poor Key Management
A large padlock program without a clear key-control system can become difficult to manage.
Failing to Plan for Group Maintenance
Multiple workers require a clearly defined group lockout process.
Not Reviewing Equipment Changes
A modified machine may no longer match its existing LOTO procedure.
These are operational issues, not simply purchasing issues.
A Practical Facility LOTO Checklist
Before considering a LOTO system complete, facility managers and EHS teams should be able to answer several basic questions:
1.Have all hazardous energy sources been identified?
2.Are isolation points clearly identified?
3.Are machine-specific procedures available where needed?
4.Can the appropriate isolation points physically accept the selected devices?
5.Are safety padlocks assigned and managed consistently?
6.Is the keying system appropriate for the facility?
7.Are circuit breaker and valve lockouts compatible with the equipment?
8.Is there a process for group lockout?
9.Are employees trained according to their responsibilities?
10.Is stored energy addressed?
11.Is isolation verified before servicing?
12.Are devices inspected and replaced when necessary?
13.Is the program reviewed when equipment or processes change?
If the answer to any of these questions is unclear, that area deserves additional attention.
Building LOTO Around the Real Workplace
The strongest LOTO programs are practical.
They reflect the equipment employees actually maintain, the energy sources they actually encounter, and the way work is actually performed.
That means facility managers should avoid designing a program entirely from a catalog or generic template.
Start at the equipment.
Identify the energy.
Review the isolation point.
Understand the maintenance task.
Then select the appropriate device and build the procedure around it.
This approach helps connect compliance requirements with real operational needs.
It also makes it easier for employees to understand and consistently apply the system.
Lockout/tagout is not simply a collection of locks, tags, and accessories.
It is an energy-control system.
The equipment matters.
The isolation devices matter.
The procedures matter.
Training matters.
Key management matters.
Employee communication matters.
And periodic review matters.
For U.S. facilities, the practical goal should be to build an energy-control program that employees can understand and use correctly in the conditions they actually face.
When selecting LOTO equipment, start with the energy source and isolation point.
Check compatibility.
Consider the working environment.
Plan for individual and group maintenance.
Think about key control and inventory.
Then connect those decisions to clear procedures and training.
The right LOTO system is not the one with the most devices. It is the one that reliably controls the hazardous energy employees encounter during real maintenance work.