Intrinsically Safe Level Switch

A complete guide to intrinsically safe (IS) level switches for hazardous areas - what intrinsically safe means (a protection method that limits the electrical energy in the hazardous area below the ignition threshold, so the circuit cannot ignite the atmosphere even under fault - the field device is designed with Ex ia or Ex ib certification, powered through an intrinsic-safety barrier in the safe area), why level switches are the natural fit (a point-level switch draws milliwatts, so its low-energy signal suits the IS loop perfectly), the hazardous-area map (Zone 0/1/2 for gas, Zone 20/21/22 for dust, Div 1/2 in North America), the protection-method alternatives (intrinsic safety vs explosion-proof/flameproof Ex d, increased safety Ex e, encapsulation Ex m), the IS loop (the certified field device + the barrier - Zener barrier or galvanic isolator - + the controller in the safe area), the NAMUR output (the two-wire current-step signal that the barrier reads), the entity parameters (field side: Ui, Ii, Pi, Ci, Li; barrier side: Uo, Io, Po, Co, Lo) and the loop calculation (Uo ≤ Ui, Io ≤ Ii, Po ≤ Pi, Co ≥ Ci + Ccable, Lo ≥ Li + Lcable), the IS level switch types (float, vibrating fork, capacitive, optical, conductive, and RF admittance all come in certified IS versions), the installation rules (certified pairs only, barriers in the safe area, cable capacitance limits, grounding, never substitute), the common errors, the FAQ, and the bottom line.

Intrinsically Safe Level Switch - Quick Answer

An intrinsically safe (IS) level switch is a point-level sensing device certified for hazardous areas under the intrinsic-safety protection method: its electrical circuit is designed so that the energy available in the hazardous area stays below the minimum ignition energy of the atmosphere - even with two faults applied - which means it cannot ignite gas, vapor, or dust no matter what happens; the switch (a float, vibrating fork, capacitive, optical, conductive, or RF admittance point sensor with Ex ia or Ex ib certification) is powered through an intrinsic-safety barrier (a Zener barrier or galvanic isolator) located in the safe area, which limits voltage, current, and power to certified levels; the loop is the certified combination - field device plus barrier - and its correctness is proven by the entity-parameter calculation (Uo ≤ Ui, Io ≤ Ii, Po ≤ Pi, Co ≥ Ci + Ccable, Lo ≥ Li + Lcable); and the most common IS level switch output is NAMUR, a two-wire current-step signal (about 8 mA / 16 mA) that the barrier reads as the on/off state. The reason level switches suit intrinsic safety so well is power: a level switch is a binary device that consumes milliwatts, so limiting its energy to safe levels costs almost nothing in performance - the same switch that works in a control cabinet works in a Zone 0 tank farm, with a barrier in between. The one-sentence rule: an IS level switch is a normal level switch with its energy capped by design and a certified barrier in the circuit - never substitute either half, and verify the loop parameters before you energize. (The switch hub: Level Switches; the automation pillar: Level Switches for Tanks for Automation; the family overview: Pressure and Level Switches.)

What Does "Intrinsically Safe" Mean?

Limit the Energy, and the Atmosphere Cannot Ignite

The definition:

The principle is energy, not enclosure: Intrinsic safety is the only protection method whose principle is energy limitation rather than containment. An explosion-proof (Ex d) enclosure works by containing an explosion - the flamepath cools and quenches the flame so it cannot escape. Intrinsic safety works by making ignition impossible: the circuit's voltage, current, and power are limited - by the field device's design and by the barrier's energy-limiting components - to levels below the minimum ignition energy of the hazardous atmosphere. No energy, no ignition, no explosion - so the field device can be as small, open, and serviceable as a normal instrument. The certification grades define the fault tolerance: Ex ia is safe with two faults applied and is permitted in Zone 0 (gas present continuously or for long periods) and Zone 20 (dust); Ex ib is safe with one fault and is permitted in Zone 1/2 and Zone 21/22. The IS loop is the complete certified circuit: the field device (the level switch), the barrier (in the safe area), and the associated apparatus (the controller or PLC input) - and certification applies to the combination, not just the switch. (The switch-side terminology: Level Switches; the wiring table: Pressure and Level Switches.)

Why Level Switches Fit Intrinsic Safety

Milliwatts Are the Perfect Hazardous-Area Diet

The fit:

A binary switch is the natural IS device: Intrinsic safety is easy for devices that naturally draw little power, and a level switch is exactly that. A point-level switch outputs a state - full, low, at this level - not a high-power process; its sensing element (float and reed, vibrating fork, optical, capacitive) and its electronics consume milliwatts; its signal is a low-current two-wire loop. Every one of these features is what the IS method rewards: the energy limit caps the loop at milliwatts, and the device loses nothing because it never needed watts. Compare the alternatives: a motor, a heater, or a solenoid cannot be made intrinsically safe - their power demand exceeds the ignition threshold by orders of magnitude - so they must use other protection methods (explosion-proof enclosure, increased safety, encapsulation). But a level switch, a pressure switch, a limit switch, a temperature switch - the binary instrument family - is the heartland of intrinsic safety: small, low-power, two-wire, and certified as a matter of routine. The practical consequence: hazardous-area level switching is an IS problem, and the catalog answers with IS versions of every level switch type. (The switch anatomy: Level Switches; the binary families: Pressure and Level Switches; the automation context: Level Switches for Tanks for Automation.)

The Hazardous-Area Map and Protection Methods

Zones, Divisions, and the Method Menu

The map and methods:

The zone tells you the probability; the method tells you the principle: Hazardous areas are classified by how likely the flammable atmosphere is present. The zone system (IEC/ATEX) grades gas and vapor from Zone 0 (present continuously or for long periods) through Zone 1 (likely in normal operation) to Zone 2 (unlikely, and only briefly); dust gets the parallel Zone 20/21/22; North America uses Divisions (Div 1 ≈ continuous/likely, Div 2 ≈ unlikely). The zone determines which protection methods and which certification grades are permitted - Zone 0 demands Ex ia or another method certified for the harshest class, while Zone 2 accepts the broader menu. The protection methods are the alternatives to intrinsic safety: flameproof (Ex d) contains an explosion in a rugged enclosure whose flamepath cools the flame; increased safety (Ex e) applies extra margins to connections, clearances, and temperatures so sparks and heat are excluded by design; encapsulation (Ex m) pots the device in compound so the atmosphere never reaches it. For a level switch, intrinsic safety is usually the best fit - small, low-power, and serviceable live in the field - but the zone, the process, and the plant's standards decide. (The switch versions across the methods: Industrial Level Switches: Float, Capacitive & More; the high-pressure corner: High-Pressure Level Switch.)

The IS Loop: Field Device + Barrier + Controller

Three Parts, One Certified Combination

The loop components:

The barrier is the energy gate; the switch is the certified load: An IS loop has three parts. In the hazardous area sits the field device - the level switch itself, certified Ex ia or Ex ib, with its sensing element and low-power electronics. In the safe area sits the barrier - the energy gate that limits what can travel into the hazardous area. Two barrier types do the job: the Zener barrier (a passive network of Zener diodes, resistors, and a fuse that clamps voltage, limits current, and blows on fault - simple, cheap, and requires a good safety ground) and the galvanic isolator (an active barrier that transfers the signal through isolation - opto or transformer - with no galvanic path, so no safety ground is needed and the loop keeps its accuracy; the more robust, more expensive choice). Beyond the barrier sits the controller - the PLC input, relay, or signal conditioner that reads the loop. The critical concept: the loop is certified as a combination. The switch's certificate and the barrier's certificate carry the entity parameters, and the combination is only safe if the loop calculation passes - never mix a certified switch with an uncertified barrier, and never trust "it looks the same." (The barrier wiring in context: Pressure and Level Switches; the output menu: Level Switches.)

The NAMUR Output

The Two-Wire Current Step the Barrier Reads

The signal:

A current step, not a contact - and it detects its own wire break: The NAMUR output (DIN EN 60947-5-6) is the standard signal for intrinsically safe switches - and it is not a contact at all. Instead of a relay contact closing or opening, the switch varies its current consumption in the two-wire loop: roughly 8 mA when not actuated, roughly 16 mA when actuated, and the barrier or PLC input reads the step as the on/off state. The genius of the current-step design is fault detection: a broken wire drops the current to 0 mA - a state that is neither 8 nor 16 - so the system can distinguish "switch not tripped" from "circuit failed," a distinction a dry contact cannot make. NAMUR is the natural IS output because it is low-power by construction (the loop is supplied at a low voltage through the barrier, typically from the barrier's own terminals) and because the current signature is immune to the contact corrosion, oxidation, and bounce of mechanical contacts. For IS level duty, the standard loop is: IS level switch with NAMUR output → barrier → PLC input configured for NAMUR - and the barrier supplies the loop and detects the wire-break state. (The output family: Level Switches; the automation integration: Level Switches for Tanks for Automation.)

Entity Parameters and the Loop Calculation

The Five Inequalities That Prove the Loop Is Safe

The parameters:

Five inequalities, and the cable counts: The proof that an IS loop is safe is a five-line calculation, and every certified device prints its parameters on its label and in its data sheet. The field device - the switch - carries its limits: Ui (the maximum voltage it can withstand and stay safe), Ii (the maximum current), Pi (the maximum power), and its own stored energy: Ci (internal capacitance) and Li (internal inductance). The barrier carries its promises: Uo (the maximum voltage it can output), Io, Po, and Co and Lo (the maximum capacitance and inductance that may be connected to its hazardous-area side). The loop is safe when all five inequalities hold: the barrier's output must stay within the switch's limits (Uo ≤ Ui, Io ≤ Ii, Po ≤ Pi), and the barrier's permitted capacitance and inductance must cover the switch's internal values plus the cable's (Co ≥ Ci + Ccable, Lo ≥ Li + Lcable) - because the cable stores energy too, and a long cable can hold enough to ignite even when the device is certified. The discipline: look up both data sheets, add the cable's capacitance and inductance per meter times the run length, and verify the five inequalities before energizing - this is the loop calculation, and it is the IS equivalent of the pressure test. (The data-sheet discipline: Sensor Data Sheet: How to Read and Use One; the certification vocabulary: Industrial Level Switches: Float, Capacitive & More.)

IS Level Switch Types

Every Level Switch Principle, in a Certified Version

The IS types (Featured Snippet):

Six principles, all available with Ex ia/ib certification: The level switch types are not excluded from hazardous areas - every principle ships in an IS-certified version, and the IS versions are designed so their electronics fit the energy budget. The float/reed is inherently IS-friendly: the reed switch is a sealed, spark-free contact, and the float carries no power. The vibrating fork runs on low-power piezo drive and sense electronics, making it one of the most common IS level switches in tank farms and chemical duty. The capacitive sensor's non-contact option suits hazardous service - no probe in the liquid - and IS versions are standard. The optical TIR sensor's milliwatt LED and phototransistor loop is a natural IS circuit - no moving parts, no sparking, compact. The conductive probe needs its electrode current limited to a non-igniting level, which the IS supply does by design. The RF admittance sensor's coating-tolerant electronics are encapsulated and certified. The pattern: the IS version of each type keeps the sensing principle and adds the energy-limited electronics, the Ex ia/ib rating, and the entity parameters on the label - and the choice among them follows the same media/process funnel as non-hazardous service, with the zone and the loop calculation added. (The type comparison: Industrial Level Switches: Float, Capacitive & More; the switch hub: Level Switches; the high-pressure corner: High-Pressure Level Switch.)

Installation Rules and Common Errors

Certified Pairs, Safe-Area Barriers, and Five Mistakes

The rules (Featured Snippet):

The errors:

Six rules and five mistakes, and every one is about the combination: The installation rules for IS level switches all protect the loop as a certified combination. Use certified pairs - the switch's certificate and the barrier's certificate must match through the loop calculation. Put the barrier in the safe area - the energy gate must sit outside the hazard, or it defeats its own purpose. Check the cable's capacitance and inductance per meter against the loop's remaining Co and Lo budget - a long run can store ignition energy even with certified devices. Ground as certified - a Zener barrier clamps on fault only through its safety ground, so a missing or high-resistance ground removes the protection. Never substitute parts - an "equivalent" switch without the matching certificate voids the loop's certification, no matter how similar it looks. Keep the Ex ia/ib documentation - the loop calculation must be provable to inspectors and insurers. The five common errors are the mirror of the rules: mixing uncertified parts, putting the barrier in the hazardous area, over-running the cable, missing the safety ground, and substituting equivalents - every one converts a certified loop into an unproven one, and in a hazardous area, an unproven loop is the one failure mode the whole method exists to prevent. (The automation discipline: Level Switches for Tanks for Automation; the data sheets that carry the parameters: Sensor Data Sheet: How to Read and Use One.)

FAQ

Q1: What is an intrinsically safe level switch?

A level switch certified under the intrinsic-safety protection method: its circuit energy is limited below the ignition threshold of the hazardous atmosphere, even under fault. It is rated Ex ia (two faults, Zone 0/20) or Ex ib (one fault, Zone 1/2, 21/22), powered through an intrinsic-safety barrier in the safe area.

Q2: How does intrinsic safety work?

By energy limitation: the barrier limits voltage, current, and power (Uo, Io, Po) to levels below the minimum ignition energy, and the certified field device's limits (Ui, Ii, Pi) plus its stored energy (Ci, Li) stay within the barrier's permitted capacitance and inductance (Co, Lo). No energy - no ignition, no enclosure needed.

Q3: What is the difference between Ex ia and Ex ib?

Fault tolerance: Ex ia remains safe with two faults applied and is permitted in Zone 0 (gas) and Zone 20 (dust); Ex ib remains safe with one fault and is permitted in Zone 1/2 and Zone 21/22. Zone 0 duty demands Ex ia.

Q4: What is a NAMUR output on a level switch?

A two-wire current-step signal (DIN EN 60947-5-6): about 8 mA when not actuated, about 16 mA when actuated, read by the barrier or PLC as the on/off state. A broken wire drops the current to 0 mA - a detectable fault state that a dry contact cannot provide.

Q5: Can I use a normal level switch in a hazardous area?

No. A hazardous area requires a certified device - an IS level switch with Ex ia/ib rating and matching entity parameters, powered through a certified barrier, with the loop calculation proven. A normal switch has no certification, no energy limits, and no place in a hazardous area.

The Bottom Line

An intrinsically safe level switch is a point-level sensing device certified for hazardous areas by the intrinsic-safety method: its circuit energy stays below the ignition threshold even under fault - so it cannot ignite the atmosphere - through the certified combination of an Ex ia/ib field device (float, vibrating fork, capacitive, optical, conductive, or RF admittance) and an intrinsic-safety barrier (Zener or galvanic isolator) in the safe area, with the NAMUR two-wire current step (about 8/16 mA) as the standard signal; and the loop's safety is proven by the entity-parameter calculation - Uo ≤ Ui, Io ≤ Ii, Po ≤ Pi, Co ≥ Ci + Ccable, Lo ≥ Li + Lcable. Level switches fit intrinsic safety perfectly because they are milliwatt binary devices - the energy limit costs nothing in performance, and the same switch that works in a control cabinet works in a Zone 0 tank farm behind a barrier. The zone map (Zone 0/1/2 gas, 20/21/22 dust, Div 1/2 in North America) sets the permitted methods and grades; the method menu (IS, flameproof Ex d, increased safety Ex e, encapsulation Ex m) offers alternatives, but IS is the natural fit for small low-power switches. The installation rules protect the combination: certified pairs only, barrier in the safe area, cable capacitance checked, safety ground for Zener barriers, no substitutions, documentation kept. The one-sentence rule: an IS level switch is a normal level switch with its energy capped by design and a certified barrier in the circuit - never substitute either half, and verify the five inequalities before you energize. (The switch hub: Level Switches; the automation pillar: Level Switches for Tanks for Automation; the family: Pressure and Level Switches; the comparison: Industrial Level Switches: Float, Capacitive & More.)

Last updated: August 2026

Disclaimer: This article is an educational overview of intrinsically safe level switches, for general reference. The protection principles (energy limitation, Ex ia/ib fault tolerance), zone classification (Zone 0/1/2, 20/21/22, Div 1/2), protection methods (Ex i, Ex d, Ex e, Ex m), NAMUR signal description, entity parameters (Ui/Ii/Pi/Ci/Li, Uo/Io/Po/Co/Lo), and loop calculation reflect common engineering knowledge and vary by certification standard (IEC 60079, ATEX, NEC/CEC), manufacturer, and application; always verify the specific device and barrier certificates, entity parameters, and the loop calculation with the manufacturer's documentation and the applicable hazardous-area codes. Installation, loop calculation, and maintenance must be performed by qualified personnel.