Is Hydrogen Safe in an Atmosphere Furnace? Purge, Interlocks and Exhaust Come First

Hydrogen atmospheres are spreading for practical reasons: stronger reducing power than nitrogen, good heat transfer, very low achievable dew point, and a lower price than argon. The risk is not in steady-state operation. It sits in the moments of start-up, shut-down and sudden power loss.

Hydrogen's flammable range in air is roughly 4% to 75% by volume. That is an extremely wide window, which means trouble can start with a small leak and continue all the way to an almost pure hydrogen atmosphere. It is colourless and odourless, and its flame is nearly invisible in daylight. Human senses are not a detection method. Hydrogen safety therefore cannot live in a procedure taped to the wall; it has to be locked into the machine's design sequence.

First: the purge before any hydrogen enters

The first step of any hydrogen operation is not admitting hydrogen. It is removing oxygen.

The standard sequence is: close and confirm door sealing, purge with nitrogen or another inert gas, measure oxygen in both the chamber and the exhaust line, admit hydrogen only after oxygen falls below the set threshold, then establish positive pressure.

Three things go wrong most often.

• Not enough purge volume. As a rule of thumb, several chamber volumes of nitrogen are needed to bring oxygen down to a safe level; the exact number depends on chamber geometry and dead corners. If a supplier says "ten minutes is enough", ask how many gas exchanges that represents and how it was calculated.
• Measuring the chamber but not the piping. Exhaust ducts, water seals, dust collectors and heat exchangers all accumulate gas. Sampling only mid-chamber is self-deception.
• Sampling in the wrong place. The oxygen analyser should draw from where gas is hardest to displace — usually a top corner or the discharge end, not next to the inlet.

Shut-down runs the same logic in reverse: stop hydrogen, purge with nitrogen, confirm the hydrogen concentration is below the safe threshold, and only then open the door. This step gets skipped more often than start-up, because everyone is in a hurry to take samples.

Second: the interlocks that must be there

The logic is simple. If any precondition fails, the hydrogen valve must close. Use this list in a technical review and ask whether each item exists and whether it is implemented independently.

• Oxygen interlock: the hydrogen valve cannot open above the oxygen threshold; if oxygen rises during operation, hydrogen is cut automatically with an alarm.
• Pressure interlock: hydrogen is cut if chamber pressure drops below the minimum positive pressure, preventing air from being drawn back in.
• Temperature interlock: some processes require a minimum temperature before hydrogen is admitted, or a cut-off below a set temperature.
• Flow interlock: hydrogen is cut when the hydrogen-to-nitrogen ratio deviates, preventing an unexpected rise in hydrogen concentration.
• Power and instrument-air failure interlock: on loss of power or instrument air, the hydrogen valve must be of the fail-closed type. An energise-to-close solenoid is the wrong choice.
• Door position interlock: hydrogen cannot be admitted unless the door is fully closed and sealed.
• Flame or exhaust interlock: if the exhaust treatment loses its flame, hydrogen is cut.

One detail reveals a supplier's depth quickly: ask whether the hydrogen valve is normally open or normally closed. Fail-closed is the correct answer. If the question cannot be answered, treat the rest of the technical discussion with more caution.

Third: exhaust cannot go straight into the shop

Whatever hydrogen goes in must come out, and untreated it goes into the building. Route it through treatment:

• Thermal destruction: duct the exhaust to an ignition burner so it leaves as water vapour. This is the most common approach and needs flame-failure protection.
• Dilution and high-level release: dilute with large air volumes far below the lower flammable limit and discharge high. Suitable only for very small hydrogen flows.
• Recovery: worth considering for large, continuous flows, but investment and complexity rise sharply.

Whichever route is used, the exhaust line needs flashback protection — flame arrestor or water seal — and the discharge point must avoid air intakes and walkways.

The shop also needs hydrogen detection with alarms. Probes go at high level above the furnace and at any likely accumulation point, because hydrogen is lighter than air and rises. The alarm should start mechanical ventilation, not just ring a bell.

The operating habits that undo good design

A well-designed furnace can still be defeated by habit. The frequent ones:

• Purging with hydrogen. Skipping nitrogen and letting hydrogen push the air out creates a controlled transition through the explosive range.
• Ignoring condition after a long shutdown. Moisture and combustible residue can accumulate; purge before ignition, every time.
• Temporary hose connections. A flexible line from a cylinder straight to the furnace, with no regulator, no non-return valve and no flow meter, will not pass any audit.
• Training only once. Staff turnover plus "the way the senior operator does it" is the most common origin of incidents.

If the customer builds a hydrogen supply station, cylinder storage distance, ventilation and explosion-proof electrical selection all matter. That scope sits outside the furnace supply, but the furnace supplier should flag it rather than stay silent.

Six questions to ask before ordering

Do not ask "is it safe" — that question has no answer. Ask these:

1. Is the purge sequence automatic or operator-confirmed? What is the oxygen threshold, and how is it measured?
2. Is the hydrogen valve fail-open or fail-closed on power loss? Is the interlock a hardwired loop or PLC soft logic?
3. How many oxygen sampling points are there in the chamber and in the exhaust line?
4. How is exhaust treated, and does the hydrogen valve close if the flame goes out?
5. Is there explosion relief, where is it, and on what basis is the relief area calculated?
6. Are leak tests and interlock function tests done before shipment, and are records provided?

Suppliers who answer these six crisply have usually built hydrogen furnaces before. Those who turn vague and pivot to "we have been doing this for twenty years, it is very safe" have probably not thought it through systematically.

Standards to reference

Different markets reference different codes, and tender documents often require a response:

• European projects commonly reference EN 746-2 (industrial thermoprocessing equipment — safety requirements for combustion and fuel handling systems), which sets rules for ignition sequence, flame monitoring and safety shut-off.
• North American projects commonly reference NFPA 86 (standard for ovens and furnaces), which quantifies ventilation, purge and interlock requirements.
• Chinese projects commonly reference GB 16912 and the applicable hydrogen safety regulations, with the specific clauses driven by local requirements.

Be clear about one thing: which edition and which clauses apply must be confirmed by the project's safety assessment or design institute, not by a supplier's assurance. Equipment can be designed to a standard; compliance responsibility stays with the project owner.

ZKR atmosphere furnaces cover 100–1800 °C at 100–2000 kW, with hydrogen offered as an optional atmosphere configured per project, including gas train and interlocks. For hydrogen projects we write the purge sequence, the interlock list and the exhaust treatment into the technical agreement at the quotation stage, not at acceptance.

Frequently asked questions

How long should nitrogen purging take?

There is no universal time. It depends on chamber volume, dead corners and nitrogen flow. The correct statement is "purge until oxygen is below the threshold"; time is a consequence. Ask for the number of gas exchanges and the verification method, and do not accept "half an hour is fine".

Is a hydrogen-nitrogen mixture safer than pure hydrogen?

The flammable range is narrower, but it is not safe. A 5% hydrogen mixture is still flammable and still needs the full purge and interlock package. Do not simplify procedures because the concentration is low.

Can the furnace sit inside the production hall?

Yes, with hydrogen detection and alarm, mechanical ventilation, explosion-proof electrical equipment and a defined relief direction. The layout must follow local fire and safety requirements, not just the equipment manual.

What happens on a power failure?

This is the most dangerous condition. Hydrogen must shut off automatically, nitrogen must come in to hold positive pressure, and the exhaust end must not develop negative pressure that pulls air back into the chamber. Ask for the exact failure sequence and have it written into the technical agreement.