What it is

Lockout/tagout (LOTO) is the habit of killing power to a piece of equipment, physically locking the disconnect open so nobody can turn it back on, and tagging it so everybody knows why — before you put a hand or a tool anywhere near a live part. "Working hot" is the opposite: leaving the circuit energized while you work on it. The whole point of this article is that de-energized is the default and hot is the rare exception, not the other way around.

Most techs get casual about this because residential 240V feels routine. It isn't. The thing that kills you on an HVAC call isn't the exotic stuff — it's the contactor you assumed was off, the capacitor you forgot was charged, or the buddy who flipped the breaker back on because he didn't know you were in the unit.

How it works

Energy gets to HVAC equipment from more than one place, and that's what trips people up. Before you call something "dead," account for every source:

  • Line voltage — the 120V/240V feed through the disconnect. Kill it AND verify no backfeed.
  • Stored energy in capacitors — run and start caps hold a charge after power is off. A big dual-run cap can bite you minutes after the disconnect is pulled; stored energy doesn't care the breaker is off.
  • A second power source — the air handler/furnace and the condenser are often on separate circuits. Pulling the outdoor disconnect does nothing to a 120V control transformer fed from the indoor unit. Two disconnects, two locks.
  • Control voltage — 24V won't hurt you, but it can energize a contactor coil and slam the contacts on your fingers if the stat calls.

The philosophy is simple: isolate every source, lock it off, then prove it's de-energized with a meter before you trust it. Locking without verifying is how people die — you can pull the wrong disconnect, hit a mislabeled panel or a backfeed, and never know until you're across it.

In the field

The basic de-energize sequence on a residential/light-commercial unit:

  1. Notify anyone affected — homeowner, building contact, your helper.
  2. Identify all sources. Outdoor disconnect, indoor disconnect/breaker, furnace switch, any second circuit. Don't assume one switch does it all.
  3. Shut them off at the disconnect or breaker.
  4. Lock it out. Your own padlock (or a breaker lockout device) on the disconnect so it can't be re-energized; on a pull-out, pull it and pocket it. If a crew is working, every person puts their own lock on — the equipment can't go live until the last lock comes off.
  5. Tag it. Your name and "DO NOT ENERGIZE" tells the next person why. Lock holds it; tag explains it.
  6. Verify dead. Meter every conductor to ground and to each other — confirm zero volts where you'll work. Prove the meter on a known live source first and after; a dead meter reads zero on a hot wire and tells you a comforting lie.
  7. Discharge stored energy. Bleed caps with a proper discharge tool (an insulated resistor), not a screwdriver, and verify zero with the meter.
  8. Now work. When done, reverse it: clear people and tools, remove YOUR lock (never someone else's), close up, re-energize.

Working hot — only when there's truly no choice

Some diagnostics genuinely require power on: reading voltage at a contactor, checking a capacitor under load, confirming transformer output, watching a sequence of operations. You can't troubleshoot a live circuit with the power off. The rules that make energized readings less dangerous:

  • Minimize it. Be live only as long as the reading takes, then kill power to actually wrench on anything. Measure, get out.
  • One hand rule. Keep the other hand off the equipment so you never become a path across your own chest/heart.
  • Insulated, rated tools; covered eyes; no metal on you. Voltage-rated leads with intact insulation, safety glasses, and no rings/watches/metal bands — metal across 240V is a burn you remember.
  • Stable, dry footing. Don't work live standing in a wet condensate pan or on a damp slab.
  • Never repair hot. Diagnosing live is sometimes necessary; tightening a lug, swapping a contactor, or pulling a wire is not. Repair de-energized, every time.

Normal values & targets

  • Control voltage: 24V AC — won't shock you but will energize coils. Treat the mechanical hazard seriously even when the electrical one is mild.
  • Residential line voltage: 120V and 240V single-phase — absolutely lethal. 240V across the chest can stop a heart.
  • Light-commercial: 208V/240V single- and three-phase, occasionally 480V three-phase on RTUs — higher available fault current, higher arc-flash energy.
  • Verify-dead reading: you want 0 volts line-to-line and line-to-ground on everything you'll touch before you call it safe.
  • Capacitor discharge: bleed to 0 volts before handling; a dual-run cap can sit at line-voltage-level charge after disconnect.

Common faults & what they mean

  • "I pulled the disconnect but I'm still reading voltage" — backfeed from a second circuit (control transformer fed from the indoor unit), a mislabeled disconnect, or a shared neutral. Find and kill the second source.
  • Got bit after the power was off — charged capacitor; you skipped the discharge step. Caps hold energy with the breaker off.
  • Contactor slammed shut while you were in the condenser — 24V control still live and the stat called. Kill control power, not just the line side.
  • Breaker flipped back on while you worked — no lock, or someone removed it. Exactly what the lock prevents.

Tech tips & gotchas

  • Lock your own lock; carry your own key. If your padlock is on it, you control when it goes live. Turned-off is not locked-off.
  • Two units, two disconnects. The split-system trap: pulling the outdoor disconnect and assuming the indoor 120V is dead too. Separate circuits — account for both.
  • Discharge caps with a tool, not a screwdriver. Shorting a big cap with a screwdriver welds the tip, pits the terminals, and throws sparks at your face. A 20k-ohm insulated resistor bleeds it safely.
  • Prove the meter twice and don't trust panel labels. Known-live before and after, and verify dead at the equipment — a dead meter reads a happy zero on a hot wire, and mislabeled breakers are everywhere.

Safety / code notes

  • General-industry lockout/tagout is governed by OSHA 29 CFR 1910.147 (control of hazardous energy) — the framework for isolating and locking energy sources before service.
  • Electrical work practices, the de-energized default, and arc-flash/shock protection are addressed in NFPA 70E (Standard for Electrical Safety in the Workplace), which treats energized work as something you justify and minimize, not a default.
  • HVAC equipment is required to have a disconnecting means within sight of the unit per NEC Article 440 (air-conditioning and refrigerating equipment) — that disconnect is your lockout point; use it.
  • Arc-flash awareness: even at residential 240V there's enough available fault energy to flash and burn if you bridge phases. On higher-energy light-commercial gear (208/480V, big services), the arc-flash hazard is real — wear appropriate PPE, keep your face out of the equipment line, and don't work energized when you can avoid it.
  • When in doubt, de-energize, lock, verify, discharge — then work. The few minutes it costs is the cheapest insurance in the trade.