Lockout tagout padlocks: how to choose, use, and stay OSHA-compliant

Last updated 2026-07-10

What does OSHA actually require from a lockout tagout padlock?

The rule is 29 CFR 1910.147, OSHA's Control of Hazardous Energy standard, known everywhere as lockout/tagout (LOTO). It took effect in 1990 and has not been substantially rewritten since, though OSHA has issued dozens of letters of interpretation that spell out what the hardware has to do. ^[1]

The device requirements live in 29 CFR 1910.147(c)(5)(ii). A lockout device has to be four things: durable enough to survive the environment it works in, standardized within the facility by color, shape, or size, substantial enough that nobody removes it without excessive force or unusual techniques like bolt cutters, and identifiable so the employee who applied it is obvious. ^[1]

That last requirement trips up most small shops. "Individually keyed" is not written word-for-word in the standard, but OSHA's compliance directive (CPL 02-00-147) states that lockout devices are assigned to one authorized employee and that a master key defeats the purpose of the rule. ^[2] Same practical result: one lock, one key, one person.

The standard names no brand and no material rating. OSHA writes performance standards. It tells you the outcome and lets you pick the hardware. That freedom is real. It also means you carry the burden of explaining your choices when an inspector asks why your locks are good enough.

What makes a safety padlock different from a hardware-store padlock?

A $4 brass padlock from a home improvement store is not automatically disqualified, but in practice it flunks at least one requirement. Four differences decide it.

Start with keying. Most consumer padlocks ship in sets that share a key, or they accept a master. Both violate the one-employee-one-lock intent. Safety padlocks built for lockout tagout programs are stamped or laser-engraved with a unique key number and come with exactly two keys cut to that number only. No master. No duplicate waiting on a hardware-store peg.

Second, shackle strength. OSHA says the device has to resist removal without excessive force. A cheap brass shackle gives up to a light bolt cutter in under a minute. Safety padlocks use hardened steel shackles built to resist that. The exact cutoff OSHA will accept is not in the standard; the agency judges it case by case, so hardened steel is the safe answer.

Third, body material. Safety padlocks come in non-conductive nylon or glass-filled nylon for electrical work, or anodized aluminum for spots where steel corrodes. A steel padlock on a marine or chemical job can fuse to the hasp or fail outright.

Fourth, color coding. Most LOTO programs assign a color per department, trade, or job so anyone can tell at a glance who locked what. Consumer padlocks come in a handful of inconsistent shades. Safety padlocks are molded in high-visibility colors (red is the common default) and sold in six to eight standard colors by every major supplier.

None of this forces you into a specialty catalog. But whatever padlock you buy has to clear all four bars.

What types of lockout tagout padlocks are available?

The market has settled into a few clear categories. Match the type to the job and you save money and skip the wrong-tool problem.

Padlock type	Body material	Best for	Typical price (2024)
Nylon/thermoplastic	Non-conductive polymer	Electrical panels, MCC rooms	$10 to $18
Aluminum (anodized)	Lightweight metal	General industrial, multi-lock hasps	$12 to $22
Steel (hardened)	Carbon or alloy steel	Heavy machinery, outdoor exposure	$14 to $28
Stainless steel	316 stainless	Marine, chemical, washdown areas	$20 to $35
Keyed-alike sets	Any of the above	Supervisor or group lockout scenarios	Varies
Keyed-different sets	Any of the above	Standard LOTO programs, individual use	$8 to $20 each

Nylon-body padlocks own electrical work because they will not carry a fault current back through the body the way metal can. The shackle is still metal, usually hardened steel or brass, so the non-conductive claim covers the body only. Work live-adjacent equipment and your hand slips, and a nylon body is a real second layer of protection.

Aluminum locks are the workhorse of general manufacturing. Light enough not to drag a hasp open, easy to color-code, and cheap enough that losing one does not turn into a near-miss report.

Stainless costs more and earns it in food processing, outdoor use, or anywhere a standard lock rusts solid inside a year. A rusted shackle can snap without warning, or worse, look cut when it never was.

Keyed-alike sets need a caution. OSHA's letters of interpretation address group lockout directly. Under 29 CFR 1910.147(f)(3), a group lockout uses a group device (usually a hasp) where each authorized employee hangs their own personal lock. Keyed-alike sets do not replace individual locks unless your written procedure accounts for who holds which key and shows the setup still meets the one-lock-one-employee intent. ^[3]

How many padlocks does your facility actually need?

At least one per authorized employee per simultaneous isolation point. Simple on paper. It gets real once you map an actual facility.

An authorized employee is anyone trained and permitted to apply lockout devices under your program. Say a mechanic services three machines with two energy-isolation points each, and two mechanics might work at the same time. Now count locks for four authorized employees across every isolation point that could be live at once. Most small shops run the math for the first time and land somewhere between 10 and 40 locks.

Then add spares. OSHA sets no spare ratio, but the working industry rule is roughly 20 percent over your calculated need. Locks vanish. Shackles corrode. A key snaps off in a cylinder at 4 p.m. on a Friday.

Contractors are the other variable. If outside contractors maintain your equipment, they apply their own locks under 29 CFR 1910.147(f)(2)(i). ^[1] Do not loan yours out, and expect the contractor's locks to be individually keyed the same way yours are. Some facilities keep a small "visitor" set to loan when a vendor shows up empty-handed. That works as a short-term bridge. If a contractor is on site regularly, OSHA expects them to arrive with their own program and their own hardware.

What do OSHA citations look like for lockout tagout violations, and how much do they cost?

Lockout/tagout lands near the top of OSHA's citation list every year. In fiscal year 2023, 29 CFR 1910.147 was the fifth most-cited standard in federal OSHA inspections, with 2,554 citations issued. ^[4]

Penalties (adjusted for inflation every year) run up to $16,131 per serious violation and up to $161,323 per willful or repeated violation as of January 2024. ^[5] A missing or thin written LOTO program, untrained employees, and locks that fail the device standard are each a separate violation. Find all three and an inspector can stack them.

The padlock findings OSHA writes up most often are three: a lock a supervisor can pop with a master key, a single lock shared by two employees on a common hasp instead of individual locks, and a lock that is plainly inadequate (thin brass shackle, no employee ID). Every one of these is fixable in under a day. That is what makes their staying power so strange.

One distinction to know. OSHA separates a "de minimis" violation (technically off-spec, no direct safety effect) from a serious violation and a willful one. A padlock missing its engraved employee name might draw a de minimis note. A padlock you can cut with household tools, standing between a worker and a stored-energy machine, is a serious violation at minimum.

What should be written on or attached to a lockout padlock?

OSHA requires the lockout device to be identifiable, meaning anyone can tell which employee applied it. ^[1] The standard allows several methods: the employee's name, a unique number assigned to them, a color keyed to a posted chart, or a combination.

In practice, most programs engrave or stamp the name straight onto the padlock body. Laser engraving is durable and cheap at the factory, and many vendors fold it into the base price. Some shops hang a metal or plastic tag on the shackle instead, but a dangling tag tears off in a machinery environment, which kills the whole point.

The lock usually rides with a lockout tag, a pre-printed or handwritten card that records who applied it, when, what work is underway, and an emergency contact. The tag never replaces the lock. 29 CFR 1910.147 is explicit that tagout-only programs are allowed only in limited cases; lockout is the preferred method whenever the equipment can take a lock. ^[1]

Run a shadow board or lockout station to store locks and hasps, and put each employee's name on their hook or peg. An empty peg tells the safety manager at a glance that someone is locked out right now. The standard does not require it. It is one of the cheapest useful controls a small shop can put in place.

How do multi-lock hasps and group lockout procedures change the padlock math?

A hasp is not a lock. It is a clamping device that fits over an energy-isolation point and offers multiple holes for individual padlocks. Under a group lockout, every authorized employee on the job hangs their own padlock on the hasp. The energy source stays dead until every lock comes off, which means every worker has finished and cleared out. ^[3]

Most hasps take three to six padlocks. Some industrial hasps take twelve or more. The holes usually run 1/4 inch to 3/8 inch across. Check your padlock's shackle diameter against the hasp before you buy. A 3/8-inch shackle jammed at a 1/4-inch hole is a miserable thing to discover mid-lockout.

Group procedures carry their own documentation under 29 CFR 1910.147(f)(3). You need a designated primary authorized employee to run the procedure, a way to account for every worker before any lock comes off, and written steps that cover shift change. Shift change is where group lockouts fail most: the outgoing shift pulls their locks before the incoming shift applies theirs, and for a moment the equipment sits unprotected.

For shift change, the recommended practice (reflected in OSHA's compliance directive CPL 02-00-147) is a transfer: the incoming employee applies their lock before the outgoing employee removes theirs. ^[2] Your padlock count has to cover that overlap.

What padlock features matter for electrical lockout specifically?

Electrical work under NFPA 70E and OSHA's electrical standards (29 CFR 1910.333) overlaps with the LOTO standard, and the padlock requirements meet in a few specific places. ^[6]

Non-conductive bodies are the recommendation for any lock going on an electrical panel, motor control center, or disconnect. The scenario you are guarding against is a fault where current runs through a metal body and into a worker's hand. Nylon and glass-filled nylon bodies close that path. Most electricians refuse a metal-body lock at an electrical isolation point, and plenty of employers write that into policy.

Shackle length matters more here than on mechanical jobs, because panel hasps and disconnect handles often leave little clearance. A standard shackle (roughly 1 inch from body to tip) fits most work. Long-shackle versions (1.5 to 2 inches) earn their keep when conduit or panel structure blocks a standard lock from reaching the hasp eye.

Yellow and red run the electrical LOTO world in U.S. facilities. OSHA mandates no meaning for either color, but whatever scheme you pick has to be in your written program and applied the same way every time. An inspector who finds three shades of red with no written key will write up a program deficiency.

How should you store and track lockout tagout padlocks?

Storage is one of those areas OSHA barely regulates but where sloppy habits cause real trouble. A lock nobody can find in under two minutes is a lock that gets skipped.

Lockout stations, sometimes called LOTO stations or safety lock boxes, are wall-mounted boards or cabinets holding padlocks, hasps, tags, and devices for the machines nearby. The case for putting them close to the equipment is strong. A mechanic who has to hike to a distant storeroom is far more likely to skip a step or share a lock than one who just reaches to the left.

Tracking means knowing, at any moment, which locks are out and which are available. The simplest version is a shadow board: a pegboard with named hooks, where an empty hook means that person is locked out somewhere. Electronic check-out systems exist and cost more. For a facility with under 50 authorized employees, a shadow board plus a paper log usually does the job.

Build a padlock audit into your annual LOTO review. OSHA requires at least an annual inspection of energy-control procedures under 29 CFR 1910.147(c)(6)(i). ^[1] That inspection targets the procedures themselves, but auditing the physical hardware at the same time is efficient and flags corroded, lost, or reassigned locks before they turn into an incident.

If you are building or auditing a written LOTO program from scratch, SafetyFolio's safety program generator can help you structure the hardware-tracking and inspection language your program needs. The standard requires the written program to describe how devices are managed. Getting that wording right the first time beats patching it after a citation.

What are the most common mistakes small businesses make with LOTO padlocks?

Read the OSHA citation database and the compliance directive together and the mistakes fall into about five patterns.

Master keys. A supervisor or safety manager keeps a master "for emergencies." This is one of the most direct hits against the standard's intent. OSHA's position, stated across multiple letters of interpretation, is that a master key defeats individual lockout and is not permitted as a standard operating practice. Emergency removal procedures exist (29 CFR 1910.147(e)(3)) and require documented steps that protect the employee whose lock is coming off. ^[1] A master key is not a substitute for those steps.

Shared locks. Two employees use one padlock on the same machine in a group lockout, each assuming the other has a key. Both are exposed the moment one of them pulls the lock before the other has finished.

No employee identification. Generic red padlocks with no name and no number. An incident happens, you cannot tell who locked what, and you cannot trace the failure.

Buying cheap in bulk. A budget move that backfires. A $4 padlock that corrodes in six months, or one with a shackle that bends under moderate force, is a compliance problem and an injury risk in one package. The gap between a marginal lock and a quality safety padlock is roughly $8 to $12 each. Spread over a three-to-five-year life, that cost is nothing.

Skipping contractor locks. Assuming the contractor brought their own, or handing them a spare without checking whether it meets your program. Under 29 CFR 1910.147(f)(2), the host employer has to make sure the contractor's LOTO procedures line up with the facility's program. ^[1] You do not supply their locks. You also cannot ignore the question.

How do you build a padlock-based LOTO program that survives an OSHA inspection?

A LOTO program that survives inspection has five things an inspector can verify in under an hour: a written program, documented procedures for each piece of equipment, trained authorized and affected employees, an annual inspection record, and hardware that matches the written requirements.

On hardware, the written program should spell out the padlock type (material, color scheme, keying method), where locks are stored, how they are assigned to employees, how lost locks get handled, and how contractor locks are managed. That last item is where most written programs fall short, because it forces you to plan for a scenario that has not happened yet.

Training records carry as much weight as the hardware. Under 29 CFR 1910.147(c)(7), authorized employees have to be trained to recognize hazardous energy sources and the methods for isolating them. ^[1] A flawless set of padlocks with no training record is still a citation.

Your lockout tagout written program should name, by job title or person, who is authorized to apply locks, who is an affected employee (someone who works where lockout happens but does not apply locks), and who runs the program. The distinction matters because OSHA's training requirements differ across the three groups.

For small businesses that need a written LOTO program and have no safety consultant on call, SafetyFolio's program generator walks you through the exact language inspectors look for. The padlock management section is one of the spots where generic templates leave gaps.

The OSHA compliance directive CPL 02-00-147 is the single most useful non-standard document here. It is the internal guidance OSHA compliance officers follow when they inspect LOTO programs. Read it and you know what the inspector is checking. ^[2]

What does an OSHA inspection of lockout tagout hardware actually look like?

An OSHA compliance officer opening a LOTO inspection usually does a document review first, then a walkaround. On the walkaround they look at real machines that require lockout to service. They may ask to watch a lockout done in real time.

On the hardware itself, they check whether the locks are identifiable to individual employees, whether the shackle is adequate, whether the keying is individual, and whether the locks match what the written program claims. They also check the lockout station or storage area to see if the inventory lines up with the number of authorized employees.

The classic finding is a gap between the written program and the shop floor. The program says red nylon padlocks keyed differently for each employee. The shop floor has a coffee can of assorted hardware-store padlocks and a fistful of keys on a nail. That gap between policy and practice is almost always a serious violation, not a de minimis one.

Inspections get triggered by a complaint, a referral, a fatality or severe injury, or a programmed inspection in a high-hazard industry. Contact with objects and equipment, a category that includes machinery, is one of the leading causes of workplace deaths tracked by the Bureau of Labor Statistics, and lockout failures are a recognized contributor. ^[7] That injury burden is a big reason LOTO stays a priority for enforcement.

Frequently asked questions

Does OSHA require a specific color for lockout tagout padlocks?

No. OSHA's 29 CFR 1910.147(c)(5)(ii) requires lockout devices to be standardized within a facility by color, shape, or size, but it does not mandate a specific color. Red is the most common industry default for lockout. Whatever color system you choose has to be documented in your written program and applied consistently across your site.

Can I use the same padlock for multiple employees if they work different shifts?

No. OSHA's compliance directive CPL 02-00-147 makes clear that lockout devices are individually assigned. Two employees using one lock on different shifts creates a gap where neither may realize the other has removed their protection. Each authorized employee needs their own lock, keyed so only they hold the key.

What happens if an employee loses their lockout padlock key?

Your written LOTO program should have a documented procedure for this. The standard approach is to report the loss right away, replace the lock rather than re-key it or use a duplicate, and update the tracking log. Do not reach for a master key. OSHA's emergency removal procedure (29 CFR 1910.147(e)(3)) covers removing a lock when the employee is unavailable, but it requires documented steps, more than a spare key.

Can a supervisor hold a master key to all lockout padlocks?

No. Multiple OSHA letters of interpretation state that a master key defeats individual lockout protection and is not acceptable under 29 CFR 1910.147. If a lock has to come off in an emergency and the employee cannot be reached, 29 CFR 1910.147(e)(3) requires a specific documented procedure that includes verifying the employee is not in danger before the lock is removed.

How much do lockout tagout padlocks typically cost?

Expect $8 to $20 per lock for standard aluminum or nylon safety padlocks bought in a keyed-different set. Individual locks from safety supply vendors run $12 to $28 for general industrial use. Stainless steel locks for corrosive or marine environments run $20 to $35 each. Hardware-store padlocks cost less but often fail OSHA's keying and durability requirements in practice.

Do contractors need their own lockout padlocks, or can they borrow mine?

Contractors should have their own locks under their own LOTO program. Under 29 CFR 1910.147(f)(2)(i), the host employer has to coordinate with outside contractors to make sure their LOTO procedures are compatible. Loaning a contractor a lock from your stock is a short-term workaround, not a substitute for the contractor having their own program and individually keyed hardware.

What is the difference between a lockout padlock and a tagout device?

A lockout padlock physically stops equipment from being energized by securing an energy-isolation point. A tagout device is a warning tag that says the equipment must not be energized but adds no physical restraint. OSHA strongly prefers lockout. Tagout-only programs are permitted under 29 CFR 1910.147 only when equipment cannot be physically locked out, and they require extra protective measures.

How many locks should each authorized employee have?

One lock per simultaneous isolation point is the practical minimum. Most authorized employees need one to three locks depending on the machines they service. If one mechanic might lock out several energy sources on the same machine at once, they need a lock for each point. Build in a 20 percent spare inventory to cover loss, corrosion, and damage.

Are nylon padlocks strong enough to be OSHA-compliant?

Yes, as long as the shackle meets the durability requirement. Nylon or thermoplastic padlock bodies with hardened steel shackles are fully acceptable under 29 CFR 1910.147 and are the preferred choice for electrical lockout because the non-conductive body reduces shock risk. Body material does not decide compliance; the whole device has to resist removal without excessive force.

How often should lockout tagout padlocks be inspected or replaced?

OSHA requires an annual inspection of energy-control procedures under 29 CFR 1910.147(c)(6)(i), and auditing your physical hardware at the same time is practical. Replace any lock with a visibly corroded shackle, a cracked body, a worn cylinder, or missing identification. There is no mandated replacement schedule by years, but a lock you cannot quickly identify or one showing physical wear should come out of service.

What should a lockout station contain beyond padlocks?

A complete lockout station usually holds padlocks (one per authorized employee plus spares), multi-lock hasps in several sizes, lockout tags, cable lockouts for valves, circuit breaker lockout clips, and device-specific adapters for your equipment. Some stations add scissors, ties, and pre-printed tags. The contents should match the energy-isolation points in your written equipment procedures, more than a generic assortment.

What OSHA penalty can I face if my padlocks don't meet the standard?

A serious violation under OSHA's penalty structure can reach $16,131 per violation as of January 2024. Willful or repeated violations can reach $161,323 each. Inadequate lockout hardware, missing employee identification, and master-key systems are each separate potential violations that can be cited together in one inspection. The hardware deficiencies are quick to correct; the penalties are not quick to recover from.

Can I use cable locks or other devices instead of padlocks for lockout?

Yes. OSHA's standard covers any lockout device, more than padlocks. Cable lockouts, ball valve lockouts, circuit breaker lockouts, and pneumatic plug lockouts are all acceptable when they meet the same requirements: individually keyed, durable, identifiable, and strong enough to resist removal. Padlocks are the most common device, but cables and specialty lockouts are needed for valves, breakers, and isolation points a padlock shackle cannot reach.

Sources

1. OSHA, 29 CFR 1910.147 Control of Hazardous Energy (Lockout/Tagout): Lockout devices must be durable, standardized, substantial, and identifiable; tagout-only programs are permitted only when equipment cannot accept a lock; emergency removal procedure under 1910.147(e)(3); group lockout under 1910.147(f)(3); annual inspection under 1910.147(c)(6)(i); authorized employee training under 1910.147(c)(7); contractor coordination under 1910.147(f)(2)(i)
2. OSHA, CPL 02-00-147 - The Control of Hazardous Energy - Enforcement Policy and Inspection Procedures: Master keys defeat individual lockout protection and are not acceptable; shift-change transfer procedures require incoming employee to apply lock before outgoing employee removes theirs
3. OSHA, 29 CFR 1910.147(f)(3) Group Lockout or Tagout: Group lockout requires a group lockout device where each authorized employee attaches a personal lock; keyed-alike sets do not substitute for individual locks unless the written procedure accounts for it
4. OSHA, Top 10 Most Cited Standards FY2023: 29 CFR 1910.147 was the fifth most-cited standard in federal OSHA inspections in fiscal year 2023 with 2,554 citations
5. OSHA, Penalties (OSHA.gov): Serious violation penalties up to $16,131; willful or repeated violation penalties up to $161,323 per violation as of January 2024
6. OSHA, 29 CFR 1910.333 - Selection and use of work practices (electrical safety): Electrical safety work practices overlap with LOTO requirements; non-conductive lockout hardware is relevant to electrical isolation points
7. Bureau of Labor Statistics, Census of Fatal Occupational Injuries: Contact with objects and equipment, including machinery, accounts for hundreds of worker fatalities annually; lockout failures are a recognized contributor
8. OSHA, Lockout/Tagout eTool: OSHA's eTool provides guidance on lockout device selection, storage, and program requirements including hardware specifications