Electronics Guide

Tin Whisker Analysis and Mitigation

A tin whisker is a single-crystal filament of tin that grows spontaneously out of a tin-plated surface, without an applied voltage, without moisture, and without any external trigger. Whiskers a few micrometers in diameter routinely reach hundreds of micrometers in length, and documented specimens exceed ten millimeters. On modern assemblies, where lead-to-lead spacings of a fraction of a millimeter are commonplace, a filament of that length is an electrical bridge waiting to be completed.

Whiskers are among the oldest unsolved problems in electronics. They were reported on cadmium and zinc plating in the 1940s, and the classic tin whisker literature dates from the 1950s. The problem receded from view for four decades because tin-lead plating, the industry default, suppresses whiskers almost completely. It returned with force after the European Union's Restriction of Hazardous Substances Directive drove lead out of most commercial surface finishes, leaving pure tin and high-tin alloys as the dominant plating on component terminations. Aerospace, defense, medical, and infrastructure programs, which are largely exempt from the restriction but which buy parts from the same commercial supply base, inherited the risk without inheriting a choice about it.

This article covers what whiskers are, why they grow, the failure modes they produce, the documented field failures that established their significance, and the standardized framework that the industry now uses to test, accept, and manage them: JESD22-A121A for measurement, JESD201A for acceptance, and GEIA-STD-0005-2 for program-level risk control.

Whisker Morphology and Definition

Precise vocabulary matters here, because several distinct phenomena produce metallic filaments on electronic hardware, and they call for different corrective actions.

What Counts as a Whisker

JEDEC standardizes the definition for test purposes: a whisker is a spontaneous columnar or cylindrical filament emanating from the surface, with a length of at least 10 micrometers and an aspect ratio (length divided by width) greater than two. Features shorter than 10 micrometers, or squat protrusions that fail the aspect-ratio test, are reported as nodules or hillocks rather than whiskers.

Whisker morphology varies widely. Common forms include:

  • Straight filaments: The classic form, needle-like and often striated along their length, with the striations marking the incremental extrusion process.
  • Kinked and bent whiskers: Filaments that change direction abruptly, reflecting changes in the stress state at the root during growth.
  • Curved or hooked whiskers: Continuously curving filaments, sometimes closing on themselves.
  • Nodules and hillocks: Squat eruptions that relieve stress without producing a long filament. They are not themselves a bridging hazard, but their presence indicates the same driving stress that produces whiskers.

Typical diameters are a few micrometers, with reported extremes above ten micrometers and, rarely, below one hundred nanometers. The NASA Goddard Space Flight Center whisker program, which maintains the most widely cited public photographic archive of whisker specimens, documents growth rates spanning roughly 0.03 to 9 millimeters per year, with enormous variability depending on plating chemistry, deposit thickness, substrate material, and storage conditions.

Distinguishing Whiskers from Dendrites

Whiskers are frequently confused with dendrites produced by electrochemical migration, and the distinction is the first thing a failure analyst must establish, because the two mechanisms have nothing in common beyond the resulting short.

  • Driving force: A whisker grows from internal compressive stress in the deposit. A dendrite grows from an applied electric field acting on dissolved metal ions.
  • Environment: Whiskers grow in dry air, in vacuum, and in sealed packages. Dendrites require an electrolyte, which in practice means condensed moisture plus ionic contamination.
  • Direction: A whisker grows outward from its root in whatever direction the stress relief happens to favor, indifferent to the location of nearby conductors. A dendrite grows from cathode toward anode, tracking the field.
  • Structure: A whisker is typically a single crystal of near-uniform cross-section. A dendrite is branched and tree-like.

The practical consequence is that dendrite failures are addressed by cleanliness and moisture control, whereas whisker failures are not. Cleaning a board more thoroughly does nothing for whiskers. Confusing the two mechanisms leads directly to a corrective action that cannot work. Related phenomena include zinc whiskers, which grow from electroplated zinc on raised-floor tiles and equipment enclosures and have caused repeated data center outages, and cadmium whiskers, which drove the original mid-century investigations.

Growth Mechanism and Driving Forces

The consensus mechanism is stress-driven mass transport. Compressive stress in the tin deposit drives tin atoms by diffusion toward a small number of favorably oriented grains, which then extrude at the surface. Growth occurs at the root, not at the tip: material is added at the base and the existing filament is pushed outward, which is why whiskers retain a uniform cross-section and why surface oxide on the filament does not stop them.

Sources of Compressive Stress

  • Intermetallic growth: The dominant source for tin plated directly over copper. Cu6Sn5 nucleates irregularly along tin grain boundaries at room temperature and occupies more volume than the copper and tin it consumes, wedging the surrounding tin grains into compression. This process needs no elevated temperature and continues throughout storage.
  • Residual plating stress: Electrodeposits are rarely stress-free as plated. Bright tin, produced with organic brightening agents that refine the grain and codeposit organic material at grain boundaries, is the worst common case.
  • Thermal expansion mismatch: Tin has a much larger coefficient of thermal expansion than the alloy 42 or copper alloy substrates it is plated on, so temperature excursions cycle the deposit through compressive states.
  • Applied mechanical stress: Lead forming, connector insertion, clamping, board flexure, and probe marks all impose local compression. Whiskers on formed lead shoulders and on connector contact wipe areas are a recurring field observation.
  • Oxidation and corrosion: Tin oxide and corrosion products formed at the surface occupy greater volume than the tin consumed, adding compression. This is the pathway through which humidity and atmospheric contaminants accelerate whisker growth even though moisture is not required for whiskers to appear.

Incubation and Statistical Behavior

Whiskers do not appear immediately. An incubation period, during which the compressive stress accumulates and the surface oxide is locally breached, precedes visible growth. Reported incubation ranges from days to years and depends on the same variables that govern growth rate.

This has an uncomfortable consequence for qualification: a finish that shows no whiskers on delivery, or after a few months of storage, has demonstrated very little about its behavior after a decade in the field. It also means that whisker behavior is statistical rather than deterministic. Whiskers nucleate on a small minority of grains, so nominally identical parts from the same lot can differ by an order of magnitude in worst-case length. Testing therefore reports the longest whisker found across a defined inspection area on a defined sample size, not an average, and the analyst must treat any single specimen as a lower bound on what the population can produce.

What Suppresses Growth

Lead is the one alloying addition with a long and unambiguous record of suppressing whiskers, which is precisely why the regulatory removal of lead reintroduced a risk the industry had largely forgotten. A few percent of lead by weight changes the grain structure and stress-relief behavior of the deposit enough to prevent whisker nucleation in the great majority of cases. Results for substitute alloying elements such as bismuth and silver are mixed and finish-specific: they reduce risk in some deposit and substrate combinations and not in others, so alloy claims warrant test data rather than assumption. Some of that data is encouraging. JEITA storage testing at 55 °C and 85 percent relative humidity held the longest whisker on parts finished with tin containing 2 percent bismuth below 50 micrometers, where pure tin controls exceeded 100 micrometers, and tin-silver finishes have performed well in the comparatively few studies published. The samples remain narrow, which is why the aerospace standards list these alloys as preferences to be demonstrated rather than mitigations to be credited.

Failure Modes

Whiskers are a reliability concern only insofar as they cause failures, and the failure modes are more varied than the obvious short circuit.

Bridging Shorts and Intermittents

The primary mode is a filament bridging two conductors at different potentials. Because a whisker is only a few micrometers in diameter, its current-carrying capacity is small. NASA Goddard's experimental work indicates that more than 50 milliamperes can be required to fuse a whisker open, and GEIA-STD-0005-2 permits an analysis to assume fusing above 50 milliamperes, treating the event as an intermittent short of roughly 50 microseconds.

Two consequences follow. In circuits that can deliver well above the fusing current, whisker shorts are self-clearing and present as intermittent, non-reproducible faults, which are notoriously difficult to diagnose and are frequently written off as "no fault found." In low-voltage, high-impedance circuits, which include most sensor and signal-conditioning nodes, the available current never reaches the fusing threshold, and the short is stable and permanent.

Whiskers can also produce resistive rather than hard shorts. In the NASA Engineering and Safety Center's 2011 technical support work for the National Highway Traffic Safety Administration, destructive physical analysis of a failed accelerator pedal position sensor from a 2003 Toyota Camry found a tin whisker forming a 248-ohm resistive short between the two redundant sensor outputs, and whiskers were found in other assemblies of the same type that had not malfunctioned. The investigation concluded that whiskers were not shown to produce the large-throttle unintended acceleration events under study, but the case remains a well-documented example of whiskers reaching an automotive sensor in a consumer vehicle and altering a measured value rather than simply shorting a rail.

Metal Vapor Arc

The most severe mode occurs at low pressure. When a whisker fuses in a rarefied atmosphere, the vaporized tin forms a conductive plasma that can sustain an arc drawing current far beyond anything the solid filament could carry. NASA Goddard has demonstrated sustained arcs at pressures near 150 torr with source conditions of about 13 volts and 15 amperes or greater, and reports that such arcs can carry hundreds of amperes where the source can supply them. The arc does not stop when the whisker is consumed; it persists as long as the circuit sustains it, and the resulting damage is catastrophic rather than intermittent.

This mechanism is why whisker risk is treated as a hard design constraint in spacecraft, launch vehicles, and high-altitude equipment, where hardware spends its life at or transits through the pressure range in which metal vapor arcs are most readily sustained.

Foreign Object Debris and Other Effects

  • Detached whiskers: A whisker broken free by handling or vibration becomes conductive foreign object debris that can lodge anywhere in an enclosure, including in a location unrelated to its origin. GEIA-STD-0005-2 directs that applications with optical or electromechanical requirements, and applications subject to extensive handling or repeated high-vibration exposure, be evaluated specifically for this risk.
  • Mechanical interference: In relays, switches, micromachined devices, and optical assemblies, a whisker can obstruct motion or occlude an aperture without ever forming an electrical connection.
  • High-frequency effects: At microwave frequencies a whisker can act as an unintended antenna or coupling structure, degrading isolation or introducing intermodulation, without producing a direct-current short.
  • Non-bridging high-voltage failures: In high-voltage circuits a whisker distorts the local field and can initiate breakdown across a gap it does not physically span. GEIA-STD-0005-2 requires that circuit analyses for high-voltage applications address these non-bridging modes explicitly.

Documented Field Failures

Whisker risk is not theoretical. The NASA Goddard whisker program maintains a public catalog of failures attributed to metal whiskers, and the entries span four decades and every application class.

  • Commercial satellites: Several geostationary spacecraft suffered satellite control processor failures traced to pure tin plating on electromagnetic relays. NASA's catalog records first failures and, in several cases, total loss of the spacecraft: Galaxy VII (first failure 1998, complete loss 2000), Solidaridad 1 (first failure 1999, complete loss 2000), and Galaxy IIIR (first failure 2001, complete loss 2006), along with satellite control processor anomalies on DBS-1, PAS-4, DirecTV 3, and Optus B1, all four of which remained operational on redundant hardware.
  • Nuclear power plants: Reactor trips and unplanned shutdowns attributed to whiskers span 1987 to 2005, among them events at Dresden in 1987 and 1997, Duane Arnold in 1990 and 1995, the South Texas Project in 1999, and a 2005 trip at Dominion's Millstone station traced to whiskers on diode terminals.
  • Military systems: The same catalog records whisker growth in F-15 radar hardware in 1986, a Phoenix air-to-air missile failure in 1989, Patriot missile system failures, and a military aircraft relay failure in 2002.
  • Medical devices: A cardiac pacemaker recall in March 1986 was attributed to whiskers, and apnea monitor failures have been linked to zinc whiskers.
  • Automotive: The accelerator pedal position sensor findings described above.

Two features of this record shape how the risk is managed. First, the failures are concentrated in long-life, low-repair-access, high-consequence systems, which is exactly where incubation periods measured in years have time to expire. Second, in almost every case the whisker was found only after a destructive analysis prompted by a failure, because no practical in-service inspection detects a filament a few micrometers across inside an assembled unit.

JESD22-A121A: Measuring Whisker Growth

JESD22-A121A, "Test Method for Measuring Whisker Growth on Tin and Tin Alloy Surface Finishes," is the JEDEC test method for whisker evaluation. It was published in July 2008 and has been reaffirmed without technical revision in May 2014, September 2019, and May 2025, a fair indication that the industry regards the measurement problem, unlike the mitigation problem, as settled. It defines how to expose samples, how to inspect them, and how to measure and report what is found. It deliberately does not set pass or fail criteria or prescribe test durations; those belong to JESD201.

The method covers the elements that make whisker results comparable between laboratories:

  • Sample preparation and handling: Whiskers are fragile and easily knocked off. Handling protocols exist to prevent the sample preparation from destroying the evidence it is meant to preserve.
  • Preconditioning: Samples may be tested as received, or after a simulated assembly reflow. JESD201 designates these as preconditioning A (none), C (tin-lead reflow, approximately 220 °C peak), and D (lead-free reflow, approximately 260 °C peak). Preconditioning matters because the reflow excursion changes the deposit's stress state and intermetallic structure.
  • Exposure conditions: Ambient temperature and humidity storage, elevated temperature and humidity storage, and temperature cycling. Temperature cycling is run at roughly three cycles per hour with soak times of five to ten minutes at the extremes.
  • Inspection: Scanning electron microscopy at magnifications on the order of 3,000×, over a defined inspection area on a defined number of terminals, with tilted views used to resolve filament length. Periodic inspections at 1,000, 2,000, and 4,000 hours capture the growth trend rather than a single endpoint.
  • Reporting: Longest whisker observed, whisker count, and whisker density, with the density banded as low (fewer than 10 whiskers per square millimeter), medium (10 to 45), or high (more than 45).

Measurement convention is a subtle but consequential detail. Because whiskers kink and curve, the measured "length" depends on whether one follows the filament along its path or takes the straight-line distance from root to tip. JEDEC settles this by defining whisker length as the straight-line distance from the point of emergence to the most distant point on the whisker, which is the quantity that corresponds to the gap a filament could actually bridge. Recovering that distance is why the method calls for a stage that translates and rotates, so the whisker can be brought perpendicular to the viewing direction: a foreshortened projection understates the length, sometimes badly. A length quoted without a stated convention and revision should be treated with caution.

JESD201A: Environmental Acceptance Requirements

JESD201, "Environmental Acceptance Requirements for Tin Whisker Susceptibility of Tin and Tin Alloy Surface Finishes," supplies what the test method omits: durations, classes, and acceptance limits. It was developed jointly by the JEDEC JC-14.3 subcommittee and the iNEMI Tin Whisker User Group, and revision A was published in September 2008. Where JESD201 and JESD22-A121 differ in detail, JESD201 takes precedence.

Product Classes

JESD201 sorts applications by service life and failure consequence rather than by industry:

  • Class 1A: Consumer products with short product lifetimes, where whiskers are of minimal concern.
  • Class 1: Industrial and consumer products with medium lifetimes.
  • Class 2: Business-critical applications with long lifetimes and low tolerance for downtime, such as telecommunications infrastructure, high-end servers, and automotive electronics.
  • Class 3: Mission-critical and life-critical applications, including military, aerospace, and medical. For this class the standard's position is that pure tin and high-tin finishes are not typically acceptable, which is why Class 3 is better read as a statement about finish selection than as a test one can pass.

Class 2 is the level at which most commercial component whisker qualification is performed and reported, and it is the level that GEIA-STD-0005-2 names when it lists successful JESD201 testing among the characteristics of lower-risk parts. Vendor whisker reports published for capacitors, inductors, and integrated circuit packages almost universally report against Class 2.

Exposure Conditions and Class 2 Criteria

JESD201A exposure conditions and Class 2 acceptance limits
Exposure Condition Duration Class 2 limit
Ambient temperature and humidity storage 30 ± 2 °C, 60 ± 3 % RH 4,000 hours 40 µm
High temperature and humidity storage 55 ± 3 °C, 85 ± 3 % RH 4,000 hours 40 µm
Temperature cycling −55 °C to +85 °C (or −40 °C to +85 °C) 1,500 cycles 45 µm

The three exposures are complementary rather than redundant. Ambient storage represents the baseline room-temperature intermetallic-driven growth that proceeds on a shelf. Elevated temperature and humidity accelerates the oxidation and corrosion contribution. Temperature cycling exercises the thermal expansion mismatch between deposit and substrate. A finish that passes one exposure and fails another is common, and it tells the analyst which stress source dominates.

The elevated-humidity condition is one place where the revision matters. Revision A specifies 55 °C and 85 percent relative humidity, where the original release used a hotter and wetter condition, and published vendor reports sometimes run their own variants on top of that. Two whisker reports are comparable only when both name the same revision and the same exposure.

What Passing Does and Does Not Establish

JESD201 acceptance is a comparative statement about a finish under defined exposures, not a guarantee. Four thousand hours is under six months; service lives in the applications that care most about whiskers are measured in decades. Because incubation can exceed the test duration, and because whisker populations are dominated by rare outlier grains, a Class 2 pass reduces expected risk without bounding it. The standard itself states that its methodology may be insufficient for military, aerospace, and similar applications, and that additional requirements belong in the procurement documentation. That caveat is the hinge between the JEDEC framework and the aerospace framework described next.

GEIA-STD-0005-2: Program-Level Risk Management

GEIA-STD-0005-2, "Standard for Mitigating the Effects of Tin Whiskers in Aerospace and High Performance Electronic Systems," addresses a different question from the JEDEC documents. Rather than asking whether a finish whiskers, it asks how a program documents and controls the risk that lead-free tin will enter hardware that cannot tolerate whisker failures. It was first issued in 2006; revision A is dated May 2012 and is now maintained by SAE International. It is designed to work alongside GEIA-STD-0005-1, which governs lead-free control plans generally, and the companion handbooks GEIA-HB-0005-1 and GEIA-HB-0005-2, and it may be invoked either standalone or as part of compliance with GEIA-STD-0005-1.

Control Levels

The standard's central device is a set of control levels that a customer specifies and a supplier documents compliance against. Each level represents a different balance among three basic strategies: risk acceptance, risk mitigation, and tin avoidance.

  • Level 1: Whisker risk is accepted. Intended for development models, test equipment, and other hardware that will not be fielded.
  • Level 2A: Risk is managed primarily by acceptance, with limited use of design rules. Intended for lower-criticality applications; tin is permitted except where specifically restricted. If a control document says only "Level 2," 2A is the default.
  • Level 2B: Risk is managed primarily by design rules, with tin avoidance secondary. Intended for non-critical boards and units, or well-redundant units, in systems with moderate to high failure consequences.
  • Level 2C: Risk is managed primarily by tin avoidance, with design rules used in exceptional cases. Intended for critical boards with limited redundancy in systems with moderate to high failure consequences.
  • Level 3: Control is by tin avoidance alone. Intended for units and boards where failure cannot be tolerated.

Levels are applied at the unit or board level, so a single system may carry several. The standard's informative annexes provide guidance on selecting levels, on the technical basis for each mitigation method, on inspection practice, on risk analysis, and on whiskers growing from bulk solder and solder joint fillets, a mechanism distinct from whiskers on plated finishes.

Accepted Mitigations

Mitigation requirements attach to Levels 2B and 2C, and the standard enumerates exactly what qualifies. The approved categories are hard potting or encapsulation; physical barriers; a tin-lead soldering process with validated complete coverage; conformal coating with validated coverage above a minimum gap; circuit and design analysis showing either that a bridging whisker would not affect the unit or that the sensitive areas carry a gap of at least one centimeter; lead-free tin parts with large gaps that have been installed with tin-lead solder and physically isolated from other lead-free tin surfaces; and any mitigation, or combination of mitigations, the customer approves. Level 3 needs no such list, because it admits no tin.

Two structural points in the standard deserve emphasis, because they are frequently misunderstood.

First, part-level practices do not by themselves satisfy the mitigation requirement. The standard is explicit that whiskers have been reported with virtually every part-level practice the industry has proposed, that part manufacturing and finishing lie outside the control of the aerospace supply chain, and that verifying those processes is difficult. A nickel underlayer or a post-plate anneal is a preference to be encouraged through the parts selection process, not a mitigation to be credited.

Second, the circuit and design analysis route focuses on effects, not probability. The analysis must show that a whisker bridging a gap would not compromise the unit; it is not required, and not intended, to estimate the likelihood that a whisker will grow or land in a particular place. This aligns the work with an existing failure modes and effects analysis or FMECA, and it sidesteps a probability estimate that the physics does not currently support.

Parts Selection Preferences

The standard lists the finish and process characteristics that aerospace customers generally prefer, while cautioning that none is risk-free. They include annealing or fusing at the part manufacturer close to the time of plating, hot-dipped rather than plated tin finishes, immersion tin for boards, low-profile parts and short-lead geometries that reduce the chance of a whisker bridging, a nickel underplate (provided it is not beneath bright tin), tin-silver finishes with roughly 1.5 to 4 percent silver, tin-bismuth with 2 to 4 percent bismuth, tin-lead with 1 to 3 percent lead, and successful passage of JESD201 testing at the Class 2 level.

Related Requirements Elsewhere

European space practice reaches the same conclusion through a blunter rule. ECSS-Q-ST-70-38C, the ECSS standard for high-reliability soldering of surface-mount and mixed technology, states that a tin finish with more than 97 percent tin purity shall not be used, which in effect requires at least 3 percent of an alloying element. The standard gives two reasons in its notes: whisker growth, and the low-temperature transformation of tin to grey tin powder. The requirement carries through unchanged into revision 1, issued in September 2017, and the standard points to dipping pure tin terminations in liquid solder to replace the tin with a tin-lead alloy. Programs that cannot avoid pure tin parts therefore specify refinishing, by hot solder dip or by replating, with the refinishing process itself qualified, because an incomplete strip can leave a whisker-prone layer beneath a compliant one.

Mitigation in Practice

Mitigation operates at three levels, and a credible program uses more than one. No single measure eliminates the mechanism.

Plating and Part Level

  • Alloying with lead: The most effective measure and the least available, since lead-bearing finishes are restricted for most commercial parts. Where an exempt supply exists, a few percent of lead by weight remains the benchmark against which other measures are judged.
  • Nickel underlayer: A nickel barrier between the copper substrate and the tin suppresses the copper-tin intermetallic that wedges into tin grain boundaries, attacking the dominant room-temperature stress source directly. Results are nonetheless mixed. Several studies report fewer and shorter whiskers on tin over nickel than on tin over copper; others report whiskers growing despite the barrier, with the difference apparently depending on the base material and on how the tin was deposited. GEIA-STD-0005-2 cites a recommended minimum nickel thickness of 0.5 micrometers for parts that will see lead-free reflow, and lists nickel underplate among its parts-selection preferences only where it does not sit beneath bright tin, whose intrinsic plating stress owes nothing to the substrate.
  • Matte rather than bright tin: Matte deposits, plated without organic brighteners, have coarser grains and lower internal stress; iNEMI and JEDEC define matte tin by a carbon content of 0.005 to 0.05 percent and a grain size of 1 to 5 micrometers. Bright tin is the higher-risk of the two, but the benefit is easy to overstate. GEIA-STD-0005-2 declines to credit matte over bright tin as a lower-risk finish without supporting data specific to the part and process in question, on the grounds that the two labels are vendor-defined, seldom verified against the iNEMI definition, and inconsistently supported by test results. One study it cites found whiskers up to 2 millimeters long on matte tin plated over steel.
  • Post-plate annealing: A bake soon after plating relieves stress and stabilizes the grain structure. The iNEMI recommendation is one hour at 150 °C within 24 hours of plating, accompanied by data showing that the anneal worked on that part and process. Timing matters, and so does the limit of the technique: the available evidence indicates that heat treatments lengthen the incubation period and delay onset rather than prevent whiskers permanently. GEIA-STD-0005-2 accordingly treats annealing as a parts-selection preference rather than a creditable mitigation, and warns that it can create false confidence over aerospace service lives.
  • Reflow or hot dip: Melting and resolidifying the deposit removes the as-plated stress state entirely and produces a fundamentally different microstructure. Hot-dipped tin is generally preferred over plated tin in aerospace parts selection for this reason.
  • Deposit thickness: Very thin deposits offer less material to feed a whisker but plate less uniformly, and very thick deposits accommodate more stress. Thickness alone is not a reliable control, and thickness recommendations vary by finish and substrate.

Assembly Level

  • Tin-lead soldering with validated coverage: Soldering a pure tin lead with a tin-lead alloy dissolves and alloys the finish in the wetted region. This is a recognized mitigation where coverage is validated, and its weakness is precisely coverage: the shoulders and upper surfaces of a formed lead, and the interior surfaces of press-fit and separable contacts, are not wetted.
  • Hot solder dip or replating: Refinishing components before assembly replaces the pure tin finish outright. It introduces its own risks, including thermal stress on the part, damage to package bodies, and the possibility of an incompletely stripped underlying layer.
  • Conformal coating: Coating constrains growth and raises the voltage required to bridge, but whiskers penetrate thin regions and coating never reaches every surface on a populated board. GEIA-STD-0005-2 credits conformal coating only with validated coverage and only above a minimum gap, and it sets that gap by coating type and control level: parylene qualifies above roughly 150 micrometers at Level 2B and 250 micrometers at Level 2C, while other coatings require roughly 250 and 500 micrometers respectively. The logic behind the gap is mechanical rather than dielectric. The space must accommodate the coating and still leave enough free air that an advancing whisker buckles under its own compressive load before it spans the distance. Coating is risk reduction, not elimination.
  • Potting and encapsulation: Hard potting immobilizes the surface completely and is credited as a standalone mitigation, at the cost of mass, thermal behavior, and the loss of any possibility of repair.
  • Physical barriers: Insulating sleeves, spacers, and barrier films placed between whisker-prone surfaces and the conductors at risk.

Design Level

  • Spacing: Increasing the gap between tin-plated surfaces and adjacent conductors is the most direct design control, because whisker length distributions fall off steeply. It is also the hardest to obtain on modern fine-pitch hardware, where lead-to-lead gaps are often smaller than the lengths whiskers routinely reach.
  • Circuit tolerance: Designing nodes so that a momentary or resistive short is detected and tolerated rather than propagated. Current-limited supplies, fault detection, and voting redundancy all reduce the consequence of a bridging event.
  • Orientation and geometry: Low-profile parts and short leads reduce the population of surfaces from which a whisker can reach a neighbor.
  • Environment control: Reducing thermal cycling amplitude and humidity exposure lowers two of the stress sources, though neither eliminates the room-temperature intermetallic pathway.

Analysis Techniques

Whisker analysis differs from most failure analysis in one important respect: the evidence is a micrometer-scale filament that any careless handling step will remove.

Preserving the Evidence

Whiskers are destroyed by wiping, by ultrasonic cleaning, by conformal coating removal, and often by simply separating a connector. When a whisker short is suspected, the sequence must begin with electrical characterization and nondestructive imaging of the intact assembly, and any disassembly must be planned to expose the suspected region without disturbing it. Photographic documentation before every step is standard practice, because a whisker that is present in one image and absent in the next at least establishes that it existed.

Imaging

  • Optical microscopy: Useful for survey work and for locating candidate sites, particularly with oblique or darkfield illumination, which makes filaments glint against the background. Resolution is inadequate for measuring short whiskers.
  • Scanning electron microscopy: The primary tool. Whisker inspection per JESD22-A121 is performed at magnifications on the order of 3,000×. Low accelerating voltage limits charging on oxidized and coated surfaces. Because a whisker projects out of the plane, tilted imaging and stereo pairs are needed to recover true length rather than a foreshortened projection.
  • Cross-sectioning: Sectioning through a whisker root reveals the deposit thickness, the intermetallic layer, and the grain structure that explain why the whisker grew, converting an observation into a root cause.

Composition and Finish Verification

A large fraction of whisker investigations turn on a simple question: what is the finish actually made of? Suppliers change plating chemistry without notice, and part markings do not record it.

  • X-ray fluorescence: The standard nondestructive screen for finish composition and for detecting pure tin in incoming inspection. GEIA-STD-0005-2 directs that XRF measurement be consistent with JESD213, which addresses the accuracy and repeatability required when measuring lead content near the reporting thresholds.
  • Energy-dispersive X-ray spectroscopy: Performed in the SEM, EDS confirms that a filament is tin rather than a fiber, a contaminant, or a dendrite, and identifies alloying elements in the deposit.
  • Electron backscatter diffraction: Maps grain orientation and size in the deposit, which is how the relationship between grain structure and whisker nucleation is studied.

Supply Chain Detection

For programs operating at Level 2B and above, detection is a continuing obligation rather than a one-time qualification. The standard requires plans for monitoring materials on a sampling basis at Levels 2B and 2C, and lot-by-lot monitoring at Level 3, with requirements flowed down to lower-tier suppliers. In practice this means XRF screening of incoming parts, documented finish declarations, and change control on plating processes, because a part that was tin-lead at qualification can silently become pure tin at the next die-shrink or site transfer.

Limitations and Open Questions

Honesty about what remains unresolved is part of competent whisker practice.

  • No accepted acceleration model: There is no validated model that converts hours of accelerated exposure into years of field life for whisker growth, as the Arrhenius and Coffin-Manson relations do for other mechanisms. This is why JESD201 sets fixed durations rather than acceleration factors, and why a 4,000-hour result cannot be extrapolated to a twenty-year mission.
  • No accepted probability model: The likelihood that a whisker of sufficient length grows in the specific place needed to bridge a specific gap is not calculable from first principles. Published application-specific risk assessment approaches exist and are useful for ranking designs against one another, but they rest on empirical length distributions with wide uncertainty.
  • Coverage cannot be fully verified: Both of the most-credited mitigations, tin-lead soldering and conformal coating, depend on covering surfaces that are difficult to inspect once the assembly is built.
  • Substitute alloys remain unsettled: The suppression mechanism of lead is not fully explained, which is part of why finding a substitute has proven difficult. Bismuth and silver additions help in some systems and not others.
  • Whiskers from bulk solder: Whiskers growing from solder joint fillets and bulk lead-free solder, as opposed to plated finishes, are a distinct and less thoroughly characterized phenomenon, addressed in a dedicated annex of GEIA-STD-0005-2.

Summary

Tin whiskers are conductive filaments extruded from tin finishes by internal compressive stress, principally the stress generated by copper-tin intermetallic growth. They require no voltage, no moisture, and no contamination, which distinguishes them fundamentally from electrochemical migration and means that cleanliness controls do nothing to prevent them. They incubate for periods ranging from days to years, grow at rates spanning more than two orders of magnitude, and appear on a small and unpredictable fraction of grains, so their behavior is statistical and their worst case is poorly bounded by any practical test.

The failure modes range from self-clearing intermittents in current-rich circuits, through stable shorts and resistive shunts in low-current sensing circuits, to sustained metal vapor arcs at reduced pressure that can carry hundreds of amperes. Documented failures include the loss of commercial spacecraft, nuclear plant trips, a pacemaker recall, and whiskers found in automotive pedal position sensors.

Three standards structure the response. JESD22-A121A defines how whiskers are grown, inspected, measured, and reported. JESD201A supplies durations, product classes, and acceptance limits, with Class 2 requiring no whisker longer than 40 micrometers after 4,000 hours of storage exposure and none longer than 45 micrometers after 1,500 temperature cycles. GEIA-STD-0005-2 raises the question to the program level, defining control levels from risk acceptance through strict tin avoidance and specifying which mitigations may be credited, which preferences merely encouraged, and what must be documented.

None of these standards eliminates the mechanism, and none claims to. What they provide is a common vocabulary, comparable test data, and a defensible record of the choices a program has made. For hardware that must work for decades in places no technician will reach, that combination of layered mitigation and documented reasoning remains the state of the practice.

Related Topics