Low Water Cutoffs: What They Are and Why Most Boilers Have Two (Part 1)
If you run boilers long enough, you learn one lesson fast: low water is not a “maintenance issue.” It’s a failure mode.
Water isn’t just what you’re turning into steam. It’s also what keeps metal from overheating. When level drops, the heating surfaces lose that protection, temperatures spike, and damage comes quick. If somebody then “saves the day” by dumping water into an overheated boiler, you can create violent flash steam conditions. None of this is theoretical.
So let’s slow this down and keep it operator-to-operator.
What a Low-water Cutoff Actually Does
A low-water cutoff (LWCO) is a safety device that stops the burner when the boiler water level drops below a safe point. That’s it.
It doesn’t “fix” low water. It prevents firing in a low-water condition while you figure out why the level dropped.
Why There are Usually Two LWCOs
A lot of operators say “the low-water cutoff” like it’s one thing. On many boilers you have two:
The primary (recycling) LWCO
This is the first line of defense. If level drops, it trips the burner. When level comes back, the boiler can relight automatically. It’s the “stop firing until you’re safe again” device.
The auxiliary (manual reset) LWCO
This is the “somebody needs to look at this” device. If level drops far enough to hit the auxiliary cutoff, the boiler won’t fire again until a person physically resets it. The point is simple: if you blew past the primary, something went wrong that deserves human attention, not an automatic restart.
Real example: In a dairy with a small HRT boiler used to heat wash/cleaning water, the primary LWCO recycled normally for years. The auxiliary LWCO was a probe-style cutoff, but it wasn’t installed correctly, so it never actually did its job. The operators didn’t know the auxiliary should be proven separately. They only ever did quick-drain checks, saw the burner cycle off on “low water,” then cycle back on when level recovered, and assumed everything was fine. It looked safe on the surface, but their second layer of protection had effectively been dead for a long time.
That two-layer setup exists because systems fail in messy ways: plugged strainers, a feed pump issue, a stuck valve, a faulty feedwater control, a bad gauge glass reading, or straight-up neglect. The auxiliary is there to force an investigation, and it’s only valuable if it can actually trip when it’s supposed to.
The Two Common Sensing Styles You’ll Run Into
There are different designs, but most low water controls fall into two buckets:
Float type (common on water columns/bridles)
This uses a float inside a chamber. When water level drops, the float drops and a switch changes state. Mechanically it’s simple, closer to a “toilet tank float” than a mystery instrument.
The catch: float controls live and die by cleanliness. If sludge/scale builds up, the float can hang up, give a false level, or fail to move the switch when it needs to.
Probe-type (conductivity)
This relies on water conducting electricity. When the probe loses contact with water, the control sees “no water” and trips the burner. Probes are common as a secondary/auxiliary cutoff on some boilers.
The catch: probe systems have their own failure modes (coating, wiring issues, incorrect installation), and they still need periodic verification, not assumptions.
LWCO vs Feeder vs Level Control
(Don’t mix these up.)
Some controls are “combo” devices: they can call for makeup water and they can shut the burner down on low water. That’s convenient, but it also confuses people.
Here’s the clean mental model:
Feeder / level control: tries to maintain normal water level by adding water
LWCO: stops firing when level is unsafe
Treat the LWCO as the last stop sign, not the steering wheel.
Your Baseline Truth Source: The Sight Glass
Controls help. Alarms help. But the first, fastest reality check is still the same: look at the sight glass.
If you can’t trust your glass (dirty, plugged, valved off, leaking), you can’t trust your day.
What’s Next (Part 2)
In Part 2 we’ll get practical:
What “testing” actually means (and what it doesn’t)
Why blowdown is both a safety check and a cleaning task
When a shunt/bypass button is appropriate
The difference between a routine check and a slow-test that proves the cutoff works in a real low-water scenario
Because the ugly truth is this: most LWCO failures are predictable and preventable, if you treat testing like a discipline instead of an annual ritual.
SUBSCRIBE TO GET PART 2 DELIVERED TO YOUR INBOX
STEAMWORKS offers standard and custom training. Contact us today!
