The three failure modes that show up when CP is pushed past its upper limit — and why the survey can still look fine while the pipeline is being damaged.
The survey looks good. Every test station reads more negative than -1.0 V. Instant-off potentials are well past the -850 mV criterion. The rectifier has been running where it has been for years and the records show consistent, healthy protection.
Then you open a bell hole.
The coating is blistered. Where it is still attached, it lifts off in your hand. Underneath, the steel has been corroding — not catastrophically, but visibly. Pitting, discoloration, places where metal has been losing thickness while the survey said everything was protected.
The numbers are not lying. They are telling you exactly what they were designed to tell you: that CP current is reaching the steel. What they cannot tell you is that the same current has been damaging the coating it was meant to be helping, and on the wrong kind of steel, may have been quietly damaging the pipe itself.
Cathodic protection has an upper limit. Push past it and you stop protecting the pipeline and start working against it.
Why "More Negative" Eventually Stops Being Better
Cathodic protection works by forcing the steel surface to act as a cathode. Current flowing into the pipe drives the metal to a more negative potential and slows the anodic dissolution reaction that would otherwise corrode it. So far, so familiar.
The complication is what happens at the steel surface to balance that current. The cathodic reactions consuming the electrons we are pushing in are not free of consequence. The two that matter most are oxygen reduction and water reduction:
Oxygen reduction: O₂ + 2H₂O + 4e⁻ → 4OH⁻
Water reduction (hydrogen evolution): 2H₂O + 2e⁻ → H₂ + 2OH⁻
Both reactions produce hydroxyl ions at the steel-electrolyte interface. The water reduction reaction also produces atomic hydrogen, some of which recombines into H₂ gas and some of which diffuses into the steel before it can.
At modest CP levels, the protective benefit far outweighs the side effects. As the polarized potential drives more negative, the second reaction takes over from the first, hydrogen production accelerates, and the side effects scale with it. There is a point — varying by steel grade, coating, electrolyte, and temperature — past which those side effects become the dominant story.
More negative is not always more protected.
Three failure modes are worth knowing on a first-name basis.
Failure Mode 1: Cathodic Disbondment
The hydroxyl production at the steel surface is local, concentrated at any holiday or weak point in the coating, and aggressive. The pH at the steel-coating interface under heavy CP can climb past 13. Most pipeline coatings — fusion-bonded epoxy, coal tar, asphalt enamel, polyethylene tape — were not designed to live in that environment indefinitely. The high-pH layer attacks the adhesion bond between coating and steel.
The result is exactly what the bell hole shows. A coating that was tight at installation lifts away from the steel. Once it lifts, it shields the underlying metal from CP current — and now you have a region where the pipe is in contact with the soil, not receiving current, and the disbonded coating is holding electrolyte against it. That is the worst possible combination: corrosion underway, with CP current unable to reach it, while the survey above shows protection.
Cathodic disbondment is well-documented in the standard test methods (ASTM G8, G42, G80; AMPP TM0115). It is the single most common over-protection symptom on operating pipelines and the one most likely to be visible in the dig. It accelerates as the polarized potential becomes more negative.
Failure Mode 2: Hydrogen Embrittlement and HISC
The atomic hydrogen produced by water reduction is small enough to diffuse into the steel matrix. Most of it recombines on the surface and bubbles off. Some of it does not. What enters the steel concentrates at grain boundaries, dislocations, voids, and — importantly — at sites of high triaxial stress: notches, pre-existing flaws, and the heat-affected zones around welds.
Hydrogen at those sites lowers the steel's resistance to brittle fracture. On the right material, under the right load, the result is hydrogen-induced stress cracking (HISC) or simple loss of ductility, both of which have shown up in the field on:
High-strength line pipe (X80, X100 and above; many production tubulars)
Hardened weld heat-affected zones on older line pipe
Cold-worked or quenched-and-tempered components, including some valve internals and bolting
Hard spots in older API 5L material — small areas of locally elevated hardness that are far more susceptible than the surrounding pipe
The susceptibility scales with how much atomic hydrogen reaches the steel, which scales with how negative the polarized potential is. ISO 15589-1 sets the upper limit for buried carbon steel at -1.20 V (vs. CSE) on instant-off and tightens that further for high-strength material. AMPP/NACE SP0169 references the same general range and calls out that more negative potentials may damage coatings and induce hydrogen-related failures.
On high-strength steel, the difference between adequately protected and embrittled can be a hundred millivolts.
The system that polarized to -1.05 V on a piece of X52 line pipe is doing its job. That same potential applied to a high-strength riser, a quenched-and-tempered fitting, or a hardened weld bead might be a different conversation.
Failure Mode 3: Excess Gas Evolution and Mechanical Coating Damage
When the polarized potential drives hard enough, the water-reduction reaction produces hydrogen gas faster than it can diffuse away from the surface. Visible bubbling under coatings is a real phenomenon at heavily over-protected sites. The mechanical pressure of accumulating H₂ gas under a still-attached coating lifts it from the steel — a different mechanism than chemical disbondment, but the end state is the same: a coating that is no longer bonded.
Two practical consequences follow:
Coating blistering. What started as a hairline holiday becomes a pocket of gas, then a blister, then a delaminated patch. The coating fails progressively.
Wasted CP current. Current that should be polarizing structure surface area is instead splitting water and bubbling off as hydrogen. Rectifier output goes up; protection does not. On occasion the rectifier ends up sized for a problem the system created itself.
In confined or above-grade applications — tank bottoms, vault interiors, monolithic isolation joints in enclosed spaces — accumulated H₂ is also a flammability concern worth naming. It is rare on buried pipeline operations, but it is not zero.
Where the Criteria Actually Sit
The lower bound is well known. -850 mV instant-off versus a copper/copper-sulfate reference is the standard polarization criterion in AMPP/NACE SP0169 and 49 CFR Part 192/195. The 100 mV polarization shift criterion is the alternative.
The upper bound gets less attention because the standards treat it differently. SP0169 names the risks of over-protection — coating damage, hydrogen-related failures — but does not codify a single number. ISO 15589-1 is more specific: -1.20 V instant-off as a working maximum on buried carbon steel, with tighter limits as steel strength increases.
Practical targets that hold up in the field:
Carbon steel, conventional grades: instant-off in the -0.85 V to -1.20 V range. Adequate protection without the side-effect ramp.
High-strength line pipe (X70 and up): keep instant-off less negative than -1.20 V unless an engineering review says otherwise. The HISC margin shrinks fast below that.
Stations, risers, fittings of unknown metallurgy: treat as suspect until the metallurgy is confirmed. Default to the conservative side.
The 100 mV polarization criterion is sometimes the better tool on systems where structures of mixed metallurgy share the same CP zone. It demonstrates protection without requiring everything in the zone to be polarized to the same depth.
What This Looks Like in the Field
A few signs that a system has crept past its useful upper limit:
Coatings that come off the pipe in clean sheets during dig inspections, with the steel underneath showing fresh corrosion at a holiday and disbondment around it.
Rectifier outputs that have crept upward over years without a corresponding change in the protected structure or the survey readings.
Instant-off potentials that have drifted progressively more negative across multiple survey cycles — particularly on systems where the coating is aging.
Hydrogen blistering visible on a previously sound coating during excavation.
Higher-than-expected current demand at otherwise ordinary tap settings.
When the data points that direction, the corrective action is rarely complicated. Drop the rectifier output, re-survey, and confirm protection at a more conservative polarized potential. The structure does not need to be pushed harder than the criterion requires.
Key Takeaways
CP works by polarizing the steel surface. The same cathodic reactions that protect the pipe also produce hydroxyl ions and atomic hydrogen, and both have downsides at high enough rates.
Cathodic disbondment is the most common over-protection symptom — high-pH attack on the coating-to-steel adhesion bond, accelerated by more negative potentials.
Hydrogen embrittlement and HISC are real concerns on high-strength steel, hardened HAZ, cold-worked components, and hard spots in older line pipe. Susceptibility scales with how negative the potential gets.
Mechanical coating damage from H₂ gas evolution is a separate failure mode at heavily over-protected sites and shows up as blistering and progressive coating failure.
The lower CP criterion is codified (-850 mV instant-off, or 100 mV polarization shift). The upper bound is less prescribed but real — ISO 15589-1 names -1.20 V as a practical maximum, tighter on high-strength material.
The fix for over-protection is usually straightforward: dial the rectifier back, re-survey, and confirm protection at a more conservative polarized potential. Pushing harder is not always pushing better.
Referenced Standards & Technical Resources
AMPP/NACE SP0169 — Control of External Corrosion on Underground or Submerged Metallic Piping Systems. Polarization criteria and over-protection guidance.
AMPP TM0497 — Measurement Techniques Related to Criteria for Cathodic Protection on Underground or Submerged Metallic Piping Systems. The reference for instant-off methodology.
ISO 15589-1 — Petroleum, petrochemical and natural gas industries — Cathodic protection of pipeline systems. Specifies upper-bound CP limits, including -1.20 V on buried carbon steel and tighter limits on high-strength material.
AMPP TM0115 / ASTM G8, G42, G80 — Standard test methods for cathodic disbondment of pipeline coatings.
Peabody's Control of Pipeline Corrosion, 2nd Edition — Chapters 4 (Criteria for Cathodic Protection) and 2 (Pipeline Coatings).
AMPP/NACE CP 1: Cathodic Protection Tester course manual — criteria, polarized potential interpretation.
49 CFR Part 192 / Part 195 — PHMSA pipeline safety regulations governing CP criteria and survey requirements.
Check out our full list of articles → The Archive
Roberts Corrosion Services, LLC
Established in 2011, Roberts Corrosion Services, LLC delivers comprehensive, turn-key cathodic protection and corrosion control solutions nationwide. Our end-to-end expertise encompasses design and inspection, installation and repair, surveys and remedial work. We provide drilling services for deep anode installations and a full laboratory for analysis of samples and corrosion coupons, as well as custom CP Rectifier manufacturing.
While our initial focus was on the Appalachian Basin area, we complete field work all over the US. We are a licensed contractor in many states and can complete a wide range of services.
Our biggest strength is in our flexibility for our clients. Solutions and Results.
Let us know how we can help.
Website
LinkedIn
Location: 39.251882, -81.047440
(304) 869-4007