Electronics Guide

Battery Safety

Battery safety encompasses the engineering practices, protection circuits, and standards that keep electrochemical energy storage from causing fire, explosion, or injury. The challenge has grown sharply with the dominance of lithium-ion chemistries, which pack high energy into small, lightweight cells. Commercial lithium-ion cells deliver roughly 150 to 270 watt-hours per kilogram, several times the 30 to 50 watt-hours per kilogram of lead-acid and well above the 60 to 120 watt-hours per kilogram of nickel-metal hydride. That energy density is precisely what makes lithium-ion batteries useful in phones, laptops, power tools, and electric vehicles, but it also means that a single cell failure can release a great deal of stored chemical and electrical energy in a very short time.

Unlike older chemistries, lithium-ion cells contain flammable organic electrolytes and operate close to the limits of their materials. A cell that is overcharged, short-circuited, mechanically crushed, or simply manufactured with a hidden defect can enter a self-sustaining heating process that no external action can stop. Battery safety therefore combines careful cell selection, layered electronic protection, mechanical and thermal design, and compliance with internationally recognized standards. This article examines how chemistry and cell construction set the baseline hazard, the failure modes that lead to thermal runaway, the protection circuits and management systems that guard against them, and the standards that govern qualification, transport, and storage.

Cell Chemistry and Construction

Safety begins with the cell itself, before any protection circuit is added. The active materials determine how much energy a cell stores and how violently it releases that energy when it fails, and the mechanical format determines what built-in safety devices the cell can carry. Selecting the chemistry and format is therefore the first and most consequential safety decision in a battery design. Further background on the underlying technologies appears in Batteries and Energy Storage.

Chemistry and Thermal Stability

Layered oxide cathodes, including lithium cobalt oxide, nickel manganese cobalt oxide, and nickel cobalt aluminum oxide, offer the highest energy density and dominate portable electronics and long-range electric vehicles. They are also the least thermally stable. When heated, these oxides decompose and release oxygen, which then oxidizes the flammable electrolyte inside the sealed cell. Raising the nickel content raises capacity but lowers the decomposition temperature, so high-nickel cells trade thermal margin for range.

Lithium iron phosphate takes the opposite position. Its olivine structure holds oxygen in strong phosphorus-oxygen bonds, so the cathode remains stable to substantially higher temperatures and does not readily supply oxygen to the electrolyte. Lithium iron phosphate cells still vent and burn under sufficient abuse, but they typically do so later, less energetically, and with a much lower tendency to propagate through a pack. The cost is roughly 20 to 30 percent lower energy density and a flat discharge curve that complicates state-of-charge estimation. Lithium titanate goes further still: its anode operates near 1.55 volts against lithium, high enough that metallic lithium never plates and no conventional passivation layer forms, which yields exceptional abuse tolerance and cycle life at a large penalty in energy density and cost.

Nominal voltage limits follow directly from chemistry, and they define the thresholds every protection circuit enforces. Graphite cells with layered oxide cathodes charge to 4.2 volts, with some high-voltage variants specified to 4.35 or 4.4 volts. Lithium iron phosphate charges to about 3.65 volts. A protection threshold that is correct for one chemistry is dangerously wrong for another, so cell datasheets, not general rules, govern the settings.

Cell Formats

Cylindrical cells use a rigid steel can that withstands internal pressure and provides room in the header for built-in safety devices: a current-interrupt device that permanently opens the circuit when internal pressure rises, a resettable positive-temperature-coefficient element, and a scored vent that ruptures in a predictable direction. This built-in protection makes cylindrical cells forgiving, and the standard 18650 and 21700 formats allow packs to be assembled from well-characterized, individually qualified units.

Prismatic cells use a rigid can as well, usually aluminum, and carry a vent, but they are larger, so a single cell failure releases far more energy than in a cylindrical format. Pouch cells enclose the electrode stack in a laminated foil bag. They are light and space-efficient, but the foil provides no structural protection, accommodates no current-interrupt device, and has no engineered vent. A pouch cell swells as gas accumulates and then splits at an unpredictable seam. Pouch designs therefore depend entirely on external restraint, enclosure design, and electronic protection, and swelling in a pouch cell is an unambiguous signal to remove the battery from service.

Lithium-Ion Failure Modes

Understanding how lithium-ion cells fail is the foundation of battery safety, because every protective measure targets a specific failure path. Failures arise from electrical abuse, mechanical abuse, thermal abuse, and internal defects, and several of these can converge on the same destructive outcome.

Overcharge and Overdischarge

Charging a lithium-ion cell above its specified upper voltage forces excess lithium out of the positive electrode and drives plating of metallic lithium on the negative electrode. The plated lithium can form dendrites that pierce the separator, while the overcharged positive electrode becomes thermally unstable and can release oxygen. Both effects raise the risk of an internal short and of exothermic reactions. Overcharge is among the most dangerous abuse conditions precisely because it degrades the cell from within while the cell still appears to function.

Discharging a cell below its lower voltage limit is also damaging, though in a different way. When the negative electrode is fully depleted of lithium, its potential rises far enough to dissolve the copper current collector. On subsequent charging the dissolved copper redeposits, potentially bridging the electrodes and creating an internal short. A cell that has been deeply discharged may appear to recover but can harbor a latent defect that manifests during later cycling. For this reason, protection against overdischarge is a safety function, not merely a means of preserving capacity, and cells that have rested below roughly 2 volts are generally scrapped rather than revived.

External and Internal Short Circuits

An external short connects the terminals through a low resistance, allowing a very large current to flow. A single 18650 cell can deliver tens of amperes into a dead short, and a large pack can deliver thousands. The resulting resistive heating can rapidly raise the cell temperature and, if unchecked, initiate thermal runaway. External shorts are addressed by fuses, current-limiting devices, and the protection circuit, all of which can interrupt the path before the cell overheats. Internal shorts are far more dangerous because no external switch can interrupt them; the short exists inside the sealed cell, and opening the pack contactors does nothing to stop it.

Internal shorts arise from manufacturing contamination, from dendrite growth, or from mechanical deformation that brings the electrodes into contact. Because the short concentrates the full energy of the cell at a single defect, it generates intense local heating that can ignite the electrolyte. Metallic particles introduced during electrode coating or winding are a recognized cause, which is why cell manufacturing runs in cleanroom conditions with magnetic separation and automated optical inspection. Mitigating internal shorts otherwise relies on robust separators, ceramic-coated separator films that resist shrinkage, and cell designs that limit the consequences of a localized fault, since the event cannot be stopped once it begins.

Mechanical and Thermal Abuse

Mechanical abuse includes crushing, puncture, and severe vibration. A nail or sharp object that penetrates a cell creates an immediate internal short at the point of contact, while crushing can rupture the separator over a larger area. Drop, crush, and vibration testing during qualification verifies that a battery pack protects its cells from realistic mechanical insults. Pack design contributes by cushioning cells, restraining them against movement, and providing an enclosure that resists deformation. In electric vehicles this extends to structural battery enclosures and crush zones that keep the pack outside the deformation path in a collision.

Thermal abuse means exposing a cell to temperatures beyond its design range. External heat accelerates the chemical reactions inside the cell and can soften or shrink the separator, leading to an internal short. Conversely, charging at low temperatures promotes lithium plating even within the nominal voltage limits, because lithium ions cannot intercalate into cold graphite quickly enough and deposit as metal instead. Most lithium-ion cells are therefore specified for charging between 0 and 45 degrees Celsius and discharging over a wider range, commonly minus 20 to 60 degrees Celsius. Temperature-dependent charge limits, thermal management, and over-temperature protection keep the cell within that window; the broader discipline is covered in Thermal Protection.

Thermal Runaway

Thermal runaway is the convergence point of nearly every abuse mode and the central hazard of lithium-ion batteries. It is a self-accelerating process in which heat triggers exothermic reactions that generate still more heat. The sequence follows a recognizable order as temperature climbs. The passivation layer on the negative electrode begins to decompose at roughly 80 to 120 degrees Celsius, exposing lithiated graphite to the electrolyte. Polyethylene separator layers melt near 130 degrees Celsius and polypropylene layers near 165 degrees Celsius, so the mechanical barrier between the electrodes disappears. Above roughly 150 to 200 degrees Celsius, depending on chemistry and state of charge, layered oxide cathodes decompose and release oxygen into a sealed volume full of flammable solvent. Each reaction raises the temperature further, so once a threshold is crossed the process feeds itself and cannot be reversed by removing the original cause.

The consequences include venting of hot, flammable gases, fire, and in confined conditions explosion. Peak cell temperatures in a high-energy layered oxide cell can exceed 600 degrees Celsius. The vented gas is a mixture of carbon dioxide, carbon monoxide, hydrogen, and light hydrocarbons, together with hydrogen fluoride and other acidic species formed from the fluorinated electrolyte salt, so the smoke is both flammable and acutely toxic. In a multi-cell pack a particular danger is propagation, where one cell in runaway heats its neighbors until they too ignite, cascading through the pack. Battery safety design seeks both to prevent the onset of runaway and, recognizing that prevention can never be perfect, to contain a single-cell event and to interrupt propagation through cell spacing, intumescent or ceramic thermal barriers, heat-spreading structures, and directed venting paths that carry hot gases out of the enclosure rather than across adjacent cells.

Protection Circuits

Electronic protection forms the first active line of defense, monitoring the cell and intervening before an abuse condition develops into a hazard. A protection circuit watches voltage, current, and temperature, and disconnects the cell when any parameter leaves its safe range. The general principles behind these functions appear in Overcurrent Protection and Overvoltage Protection; the discussion here concerns their application to cells.

Overcharge Protection

Overcharge protection monitors cell voltage during charging and disconnects the charge path when the voltage reaches the upper safety limit. In a single-cell device this is performed by a dedicated protection integrated circuit driving a series field-effect transistor. For a 4.2-volt cell the threshold typically falls between 4.25 and 4.35 volts, set conservatively below the point at which the cell chemistry becomes unstable, and a delay of roughly one second prevents tripping on brief transients. Once the voltage falls back into the safe range, the protection re-enables charging, so the function is self-recovering under normal conditions.

Because the consequences of overcharge are so severe, robust designs add a second, independent layer. A separate secondary protection circuit, typically set a few tens of millivolts above the primary threshold and often driving a non-resettable element such as a thermal fuse, guards against the failure of the primary protection itself. This redundancy reflects a core principle of battery safety: the single most dangerous fault deserves more than one barrier, so that a single component failure, including a shorted protection transistor, cannot expose the cell to overcharge.

Overdischarge Protection

Overdischarge protection monitors cell voltage during discharge and disconnects the load when the voltage falls to the lower safety limit, commonly between 2.3 and 3.0 volts depending on the cell. Disconnecting the load prevents the deep-discharge damage that dissolves the copper current collector and seeds an internal short. After the load is removed the circuit enters a low-current sleep state drawing only a few microamperes, so it does not drain the cell further, and it re-enables only when a charger is detected, ensuring that the cell is not woken into a damaging discharge. Chargers paired with such circuits typically apply a small precharge current until the cell recovers above the sleep threshold, and refuse to charge at all below a floor voltage that indicates permanent damage.

Overcurrent and Short-Circuit Protection

Overcurrent protection limits the current drawn from the cell, guarding against excessive discharge current and against the very high current of an external short. The protection circuit senses current, usually as the voltage across the on-resistance of its switching transistor or across a small sense resistor, and opens the path when the current exceeds a threshold. Short-circuit protection is a faster-acting variant with a higher threshold and a delay measured in hundreds of microseconds, designed to interrupt a dead short well before the cell can overheat.

Several complementary devices reinforce electronic overcurrent protection. A polymeric positive-temperature-coefficient device increases its resistance by orders of magnitude when heated by excessive current, throttling the current and resetting after it cools. A one-time fuse provides permanent disconnection for the most extreme faults. Many cylindrical cells also incorporate an internal current-interrupt device that opens irreversibly when internal pressure rises, on the order of one to two megapascals, and a scored vent that releases gas in a controlled way rather than allowing the cell to burst. These built-in devices operate independently of the external electronics, which is precisely their value.

Over-Temperature Protection

Temperature is both a cause and a symptom of battery hazards, so protection circuits monitor it directly. Negative-temperature-coefficient thermistors placed in contact with cells report temperature to the protection electronics, which inhibit charging or discharging when the temperature leaves the safe window. Charging is forbidden below 0 degrees Celsius to prevent lithium plating and above roughly 45 degrees Celsius to avoid accelerating degradation, while discharging is curtailed at high temperature to prevent runaway. Some packs add a thermal cut-off device or thermal fuse that physically opens the circuit at a fixed temperature as a non-electronic backstop, and larger packs place several sensors so that a local hot spot is not averaged away by cooler cells elsewhere.

Cell Balancing and Battery Management

Multi-cell batteries require coordination beyond the protection of individual cells. A battery management system supervises the whole pack, maintaining the cells in a matched, safe condition and providing the data needed for safe operation. Its architecture and functions are treated in detail in Battery Management Systems.

The Need for Cell Balancing

Cells connected in series must share the same current, but small differences in capacity and internal resistance cause their voltages to diverge over many cycles. Without correction, one cell reaches its upper limit before the others during charging, and another reaches its lower limit first during discharge. Charging must then stop early to protect the highest cell, and discharging must stop early to protect the lowest, so the weakest cell limits the usable capacity of the entire pack and is stressed the hardest. Balancing keeps the cells aligned so that the pack charges and discharges as a coordinated whole.

Beyond capacity, balancing is a safety function. An unbalanced series string can drive an individual cell into overvoltage or undervoltage even while the pack voltage looks acceptable, because the pack-level measurement averages out the imbalance. In a 96-cell string, a cell 200 millivolts above its neighbors is invisible in a pack voltage reading yet stands well into overcharge territory. Per-cell monitoring combined with balancing ensures that no single cell is silently pushed past its safe limits, which is exactly the condition that precedes overcharge and overdischarge damage.

Passive and Active Balancing

Passive balancing dissipates the excess charge of the most-charged cells through resistors, bleeding them down until the string is matched. It is simple, inexpensive, and adequate for many applications, at the cost of wasting the bled energy as heat and balancing only during charging. Balancing currents are modest, typically tens to a few hundred milliamperes, because the heat must be removed from the monitoring board. Active balancing instead transfers charge from stronger cells to weaker ones using capacitors, inductors, or transformers, conserving energy and balancing during both charge and discharge. Active balancing is more complex and costlier, and it is favored in large packs where the conserved energy, faster equalization, and improved utilization justify the added circuitry.

Battery Management System Safety Functions

The battery management system, or BMS, is the central supervisor of a multi-cell pack and the integrator of its safety functions. It measures the voltage of every cell or series group, the pack current, and multiple temperatures, and it commands the main contactors or switches that connect the pack to the load and charger. On detecting an out-of-range condition, the BMS disconnects the pack, providing pack-level overvoltage, undervoltage, overcurrent, and over-temperature protection that complements the protection at the cell level. Measurement accuracy is itself a safety requirement: analog front ends resolve cell voltage to within a few millivolts, since a larger error would either permit real overcharge or force the usable voltage window to be narrowed wastefully.

A well-designed BMS layers its safety functions so that no single failure leaves the pack unprotected. Primary protection handles normal operating excursions, while independent secondary protection, often implemented in separate hardware with its own voltage references, guards against failure of the primary system or of the contactors themselves. The BMS also estimates state of charge and state of health, enforces temperature-dependent charge and discharge limits, manages balancing, monitors isolation resistance between the high-voltage pack and chassis, and logs faults for later analysis. In safety-critical applications the protective functions are developed under formal functional-safety discipline, as described in Functional Safety: automotive packs are assessed under ISO 26262, where the disconnection function commonly carries an ASIL C or ASIL D rating, and stationary and industrial systems are assessed under IEC 61508 with an equivalent safety integrity level.

Standards and Compliance

Battery safety is governed by a layered set of standards covering cells, packs, and the products that contain them. Compliance is generally mandatory for market access and is a prerequisite for transport. The principal standards address abuse testing and qualification, while a separate regime governs transportation. The standards landscape is surveyed more broadly in Battery Safety Standards and Electrical Safety Standards.

UL 1642 and the UL 2054 Family

UL 1642 is a widely recognized North American standard for lithium cells, both primary and rechargeable, intended for use in products and for handling by technically trained persons rather than by end users. It subjects cells to a battery of abuse tests, including short circuit, abnormal charging, forced discharge, crush, impact, shock, vibration, heating, and altitude simulation, with the requirement that the cell neither explode nor catch fire. UL 1642 establishes confidence at the cell level that abuse will not produce a catastrophic outcome. The companion standard UL 2054 addresses household and commercial battery packs, evaluating the assembled battery and its protection at the system level, and it references UL 1642 for the cells inside. UL Solutions also publishes UL 62133-2, a national adoption of the international lithium standard, so manufacturers targeting several markets can often work from a single test program.

IEC 62133

IEC 62133 is the leading international standard for the safety of portable sealed secondary cells and batteries, and it is required or referenced in many regions for consumer products. The 2017 revision split the standard into two parts: IEC 62133-1 for nickel systems and IEC 62133-2 for lithium systems, replacing the earlier single-document edition. The lithium part specifies tests for both intended use and reasonably foreseeable misuse, including continuous low-rate charging, external short circuit, free fall, mechanical shock, crush, overcharging, forced discharge, and thermal abuse. It also includes the forced internal short-circuit test, an unusually invasive procedure in which a cell is disassembled in a controlled atmosphere, a nickel particle of defined shape is placed within the electrode assembly, and the cell is then pressed until an internal short forms. Amendment 1, published in 2021, clarified that test and allowed it to be waived where protective devices make the fault condition implausible. Passing IEC 62133-2 demonstrates that a cell or battery tolerates the abuse conditions expected in portable applications without fire or explosion, and it is the usual basis for a CB Scheme certificate accepted across participating national schemes.

UN 38.3 for Transport

UN 38.3, part of the United Nations Manual of Tests and Criteria, governs the transport safety of lithium cells and batteries and is effectively mandatory before such products may be shipped. It comprises eight tests: altitude simulation (T.1), thermal cycling (T.2), vibration (T.3), mechanical shock (T.4), external short circuit (T.5), impact or crush (T.6), overcharge (T.7), and forced discharge (T.8). Tests T.1 through T.5 are performed in sequence on the same samples, reproducing the cumulative stresses a battery experiences in the supply chain. The remaining tests are targeted: impact or crush and forced discharge apply to cells, while overcharge applies to rechargeable batteries. Samples pass only if they show no disassembly, rupture, fire, or leakage, and, where applicable, retain a defined fraction of their open-circuit voltage.

Compliance is documented in a UN 38.3 test summary, which manufacturers and distributors have been required to make available since 1 January 2020. That summary underpins the dangerous-goods regulations applied to air, sea, and ground transport. Because lithium batteries are classified as dangerous goods, shipping also involves specific packaging, marking, labeling, and state-of-charge requirements, with air transport subject to the most stringent rules. UN 38.3 thus connects product design to logistics, since a battery that cannot pass it cannot reach the market by ordinary means. A significant design change to a tested cell or battery, such as a new electrolyte or a revised enclosure, requires retesting.

Application and System Standards

Beyond cell and transport standards, application-specific requirements govern complete products. Information technology and audio-video equipment containing batteries falls under the hazard-based safety standard IEC 62368-1, which treats the battery as one energy source among several. Industrial lithium batteries, spanning stationary uses such as uninterruptible power supplies and grid energy storage as well as motive uses such as forklifts and automated guided vehicles, are covered by IEC 62619. Electric vehicle batteries are addressed by UL 2580 and the ISO 6469 series, which extend evaluation to pack-level abuse, propagation, and integration with the vehicle.

Stationary energy storage has produced a distinct discipline of its own. UL 9540A is not a pass-or-fail safety standard but a test method that characterizes how fire propagates within a cell, module, unit, and installation. Its measurements feed the installation requirements of UL 9540 and of fire codes such as NFPA 855, which set separation distances, ventilation, and suppression provisions for battery rooms and containers. These higher-level standards assume safe cells and focus on how the battery behaves within its intended product and environment.

Transport, Storage, and Handling

Even a fully compliant battery requires care throughout its life. Transport, storage, and handling practices reduce the probability that a latent defect or an external insult will trigger a failure when the battery is outside the control of its designers.

Transport Practices

Because lithium batteries are dangerous goods, their transport follows strict rules derived from UN 38.3 and the modal dangerous-goods regulations. Shipments are classified by UN number: lithium-ion batteries shipped alone are UN 3480, those packed with or contained in equipment are UN 3481, and the lithium metal equivalents are UN 3090 and UN 3091. Terminals are protected against short circuits, cells are restrained against movement, and packaging is designed to prevent damage and to contain a single-cell failure.

Air transport, where a fire would be especially dangerous, imposes the tightest constraints. Since 2016, lithium-ion cells and batteries shipped alone under UN 3480 must be at a state of charge no greater than 30 percent of rated capacity and may travel only on cargo aircraft, a rule adopted after cargo fires and test work showing that the energy released in runaway falls sharply at reduced state of charge. The 2026 edition of the airline dangerous-goods regulations extended a mandatory 30 percent limit to certain batteries shipped with equipment and to battery-powered vehicles, requirements that had previously been recommendations. Damaged, defective, or recalled batteries are forbidden from air transport altogether and must move by surface under special provisions.

Storage Conditions

Lithium-ion cells are best stored at a moderate state of charge, commonly 30 to 50 percent, and in a cool, dry environment. Storing a cell fully charged accelerates aging and keeps it at the voltage where it is least stable, while storing it fully discharged risks deep-discharge damage as self-discharge proceeds over months. A partial charge balances these concerns, providing energy headroom for safety while limiting degradation. Elevated temperature accelerates both aging and the chemical reactions that lead to failure, so storage areas are kept well below 30 degrees Celsius and away from heat sources. Long-term inventory is checked periodically and topped up before any cell drifts toward its lower limit.

Bulk storage adds the consideration of propagation. Large quantities of cells are stored with separation, in non-combustible enclosures, and with provisions for ventilation and fire response, so that the failure of one unit does not cascade through an entire stock. Fire codes and insurers increasingly set explicit limits on quantity, spacing, and suppression for warehoused lithium batteries. Segregating damaged, swollen, or recalled cells from healthy inventory is essential, because a compromised cell is a likely ignition source and must not be allowed to endanger the rest.

Handling Damaged Cells

A swollen, leaking, or physically damaged cell is a warning of compromised internal integrity and must be treated as a potential fire hazard. Such cells are isolated from other batteries and combustible materials, handled without further mechanical stress, and routed to appropriate hazardous-waste or recycling channels rather than ordinary disposal. Puncturing or crushing a damaged cell to deactivate it is dangerous and must be avoided, since it can trigger the very internal short the handler is trying to prevent.

Responding to a battery fire also differs from ordinary firefighting. A cell in thermal runaway supplies its own oxidizer, so smothering does not extinguish it; the practical objective is to cool the surrounding cells with large volumes of water and to prevent propagation while the affected cell burns out. Because a damaged cell can reignite hours after it appears to be extinguished, involved batteries are observed for an extended period before they are considered safe.

Summary

Battery safety addresses the substantial hazards that accompany the high energy density of modern cells, above all lithium-ion. Chemistry and format set the baseline: layered oxide cathodes offer the most energy and the least thermal stability, lithium iron phosphate trades energy for a wide margin of stability, and rigid cylindrical cans accommodate built-in interrupt and vent devices that pouch cells cannot carry. The principal failure modes, overcharge, overdischarge, external and internal short circuit, and mechanical and thermal abuse, share a common destination in thermal runaway, the self-accelerating process that produces venting of toxic and flammable gas, fire, and, in confined conditions, explosion. Because runaway cannot be reversed once it begins, safety design works on both prevention and containment.

Layered electronic protection guards each cell against overcharge, overdischarge, overcurrent, short circuit, and over-temperature, with redundant barriers reserved for the most dangerous faults. In multi-cell packs, cell balancing keeps the series string matched so that no individual cell is silently driven past its limits, and a battery management system supervises the pack, integrating per-cell monitoring with pack-level disconnection and, in critical applications, formal functional-safety discipline under ISO 26262 or IEC 61508.

Standards translate these principles into testable requirements. UL 1642 and IEC 62133-2 qualify cells and batteries against abuse, UL 2054 and application standards such as IEC 62368-1, IEC 62619, and UL 2580 extend the evaluation to packs and products, UL 9540A characterizes fire propagation in stationary storage, and UN 38.3 governs the transport of lithium batteries as dangerous goods. Sound transport, storage, and handling practices complete the picture, ensuring that batteries remain safe not only by design but throughout their service life and at end of life.

Related Topics