A safety interlock is a device that prevents a piece of equipment from operating when conditions aren’t safe. It works by linking two actions together so that one cannot happen unless the other is in the correct state. The garage door that reverses when its bottom sensor detects something in the way, the microwave that shuts off the instant you open the door, the industrial press that won’t cycle unless its guard is closed: these are all interlocks in action.
The core idea is simple. An interlock either blocks a dangerous action before it starts or forces the system into a safe state the moment something goes wrong. Unlike a warning label or an alarm, an interlock physically or electronically makes the unsafe condition impossible.
How an Interlock System Works
Every safety interlock, whether it’s a simple mechanical latch or a computerized control system, follows the same three-part logic. First, a sensor detects a condition: a door position, a guard’s presence, a temperature reading, the proximity of a person. Second, a logic module evaluates that signal and decides whether the condition is safe. Third, an executor acts on that decision by allowing operation to continue or shutting things down.
What separates an interlock from a regular on/off switch is that the operator doesn’t get a choice. You can’t override it through normal use. The system enforces the safe sequence automatically, regardless of what the person at the controls wants to do.
Mechanical Interlocks
The simplest interlocks are purely physical. They use the geometry of parts, springs, bolts, or keys to prevent unsafe combinations. A few common designs show up across industries:
- Keyed or tongue-style interlocks fit onto the leading edge of a sliding, hinged, or removable machine guard. When the guard opens, a tongue-shaped key withdraws from the switch body, breaking the circuit and stopping the machine.
- Hinged interlocks mount directly over the hinge pin of a guard door. When the door swings open, the switch trips.
- Bolt-lock interlocks hold a guard physically locked in place while the machine runs. A hand-operated bolt must be retracted to open the guard, and retraction is only possible after a built-in time delay allows the machine to spin down to a full stop.
Mechanical interlocks are valued for their simplicity. They have no software, no power supply to fail, and no programming to corrupt. Their limitation is that they can only enforce straightforward conditions, like “guard open equals machine off.”
Electrical and Electronic Interlocks
When the logic gets more complex, interlocks move into electrical territory. These use relay contacts, circuit breakers, and sensor networks to enforce rules that mechanical parts alone can’t handle.
A good example comes from medium-voltage electrical switchgear, where interlocks enforce a strict sequence to protect maintenance workers. Before anyone can open the door to a transformer compartment, three conditions must all be true: the main switch must be open, the grounding switch must be closed and locked, and the low-voltage breaker must be open and locked. No single person forgetting a step can defeat the system, because the interlock won’t physically allow the door to open until every condition is satisfied.
In industrial electrical panels, interlocks also prevent contradictory states. You can’t close a circuit breaker while the grounding switch on that same circuit is closed, because connecting a live power source to a grounded line would cause a short circuit. The interlock makes it mechanically or electrically impossible to move both devices into the wrong position at the same time.
Software and PLC-Based Interlocks
Modern factories and process plants often run interlocks through programmable logic controllers (PLCs), the small industrial computers that coordinate automated equipment. Software interlocks use programmed rules to monitor dozens or hundreds of inputs simultaneously, checking temperatures, pressures, flow rates, valve positions, and guard sensors before allowing a process to proceed.
Software interlocks are flexible and can handle complex logic that would be impractical to wire with physical relays alone. But they come with a critical limitation: if the PLC’s processor fails, the software interlock disappears with it. Hardware interlocks built from physical relays and safety-rated switches fail to a known safe state, typically shutting everything down. A software interlock, by contrast, simply stops running. Hardware interlocks respond in 1 to 10 milliseconds regardless of what the computer is doing, while software interlocks depend on the PLC’s processing cycle and typically respond in 5 to 50 milliseconds.
For this reason, international safety standards like IEC 62061 and ISO 13849 require that interlocks protecting people from serious injury use hardware-based, safety-rated components. Software interlocks are fine for protecting equipment or optimizing processes, but they should never be the sole barrier between a worker and a hazard.
Everyday Examples
You probably interact with safety interlocks multiple times a day without thinking about them.
A microwave oven typically contains at least three microswitches in its door mechanism. These switches must close and open in a specific sequence when you shut the door, and arrive at a precise end configuration, before the controller will allow the magnetron to generate microwave radiation. This sequencing requirement means that crudely shorting two wires together won’t fool the system. If any switch is out of position, the microwave won’t run. The entire purpose is to ensure that microwave energy is never generated while the door is open.
The single-beam light curtain at the bottom of a garage door is another interlock. If the infrared beam is broken while the door is closing, the motor reverses. Your car’s transmission interlock requires the brake pedal to be pressed before you can shift out of park. A washing machine’s lid lock prevents the spin cycle from running while the lid is open. In each case, the machine checks a safety condition before it allows a potentially dangerous action.
Industrial and High-Hazard Applications
In industrial settings, the stakes are higher and the interlocks more sophisticated. The ANSI standard for mechanical power presses defines an interlocked barrier guard as one where the press stroke cannot begin unless the guard fully encloses the point of operation. The same standard requires a drive motor interlock that prevents the clutch from engaging unless the motor is running in the correct direction.
Light curtains are a common interlock in manufacturing. These devices project an array of infrared beams across the opening of a machine. If a hand or arm breaks a beam, the machine stops before the press, blade, or robot can cause injury. Trapped-key systems are used in heavy industry to enforce step-by-step lockout sequences, ensuring workers physically cannot reach a hazard until all energy sources have been isolated.
In facilities like particle accelerators and radiation therapy vaults, interlocks prevent radiation from being produced until every entry door is verified closed and a complete safety logic chain is satisfied. If someone opens a door, radiation production stops and cannot resume simply by closing the door again. The system requires a deliberate reset sequence, ensuring that no one is still inside.
What Happens When Interlocks Fail
Interlock failures fall into three categories: hardware, software, and human. Hardware failures, like a worn-out microswitch or a corroded sensor, are relatively easy to detect because they usually produce visible symptoms such as a machine that won’t start or a guard that won’t lock. Software failures are subtler, potentially causing unpredictable behavior that’s difficult to trace. But human failures are the most common and most dangerous.
Deliberately bypassing an interlock, sometimes called “cheating” or “defeating” the safety system, is a persistent problem in workplaces. Workers tape down microswitches, wedge magnets into sensors, or reprogram PLC logic to skip safety checks, usually to save time or avoid nuisance trips. This is one of the leading causes of serious industrial injuries involving interlocked equipment. OSHA’s hazardous energy control standard (29 CFR 1910.147) specifically addresses situations where workers must remove or bypass a guard or safety device, requiring formal lockout/tagout procedures whenever that happens.
Testing and Maintenance
An interlock that hasn’t been tested recently might not work when it matters. Standard practice in high-hazard facilities calls for periodic functional testing where each input to the system is exercised and every protective response is verified. This means physically opening the guard, breaking the light curtain beam, or tripping the door switch and confirming that the machine actually stops.
Good testing protocols use a check sheet with individual sign-offs for each observed response, creating an auditable paper trail. The test should exercise the entire system from end to end at least once, not just individual components. It should also verify that the system responds correctly to likely improper actions, not just normal ones. For digital systems, this means testing both the expected safety functions and potential misuse scenarios.
After any major repair, renovation, or installation of new equipment, OSHA requires that energy isolating devices be designed to accept a lockout device. This reflects a broader principle: every time equipment changes, the interlocks protecting it need to be re-evaluated and re-tested to make sure they still work as intended.