← Resources
Safety·6 min read·

Two hand control: types, timing and why it is often the wrong answer

Type IIIA, IIIB and IIIC, the half second rule, and the reason two hand control protects exactly one person.

Short answer

Two hand control requires both actuators to be pressed within about half a second of each other, held for the whole hazardous movement, and released before another cycle can start. ISO 13851 defines types: IIIA and IIIB differ in monitoring, IIIC adds Category 4 architecture. It protects only the person holding the buttons, which is why it is a poor primary safeguard on any machine somebody else can reach.

The safety chain, and where the rating appliesSensorguard switchLogicrelay or safety PLCActuatorcontactorTHE RATING APPLIES TO ALL OF THIS, NOT TO ONE BOXONE SAFETY FUNCTION

Two hand control has an intuitive appeal that survives longer than it should: if both hands are on buttons, neither hand is in the press.

That is true, and it is the entire extent of what the device guarantees.

The requirements

ISO 13851 sets four behaviours, and all four are needed for the arrangement to mean anything.

  • Both actuators. Both must be operated for the machine to move.
  • Synchronously. Within about half a second of each other. Outside that window the cycle is refused.
  • Continuously. Releasing either one stops the hazardous movement immediately.
  • Released and re-pressed. Both must be released before the next cycle can be initiated, so holding one down between cycles achieves nothing.
The half second rule is the anti-defeat measure. Without it, one actuator can be taped, wedged or held by a knee, and the arrangement degrades to a single button.

The types

Type III is the one used on machinery, and it comes in three grades that differ in how faults are handled.

  • IIIA. Synchronous actuation, continuous holding, basic monitoring.
  • IIIB. As IIIA, with the fault detection expected of Category 3.
  • IIIC. As IIIB, at Category 4, with faults detected at or before the next demand.

The type is not a preference. It comes from the required Performance Level, which comes from the risk assessment.

The physical requirements

The actuators have to be far enough apart that one hand cannot reach both, and shrouded so that a palm or a forearm cannot span them. The standard gives minimum separations.

They also have to be far enough from the hazard that the machine can stop before a released hand reaches it, which is the same safety distance calculation used for a light curtain, based on the overall stopping performance.

The limitation that matters

Two hand control protects the operator holding the buttons. It says nothing whatever about anybody else.

On a press where a second person loads blanks, or where a supervisor reaches in, or where the back of the machine is open to a walkway, two hand control is not a safeguard. It is a hand protection device for one person, and the machine still needs guarding for everyone else.

When it is genuinely the right choice

Small bench mounted presses and assembly fixtures, worked by one person, where the hazard zone is small enough to be visible in its entirety from the operating position, and where the loading action genuinely needs both hands free at the moment the machine moves.

Outside that, a light curtain with a proper safety distance usually gives more protection, to more people, with less to defeat.

Common questions

What is the 0.5 second rule?
Both actuators must be operated within about half a second of each other, or the cycle is refused and both must be released before trying again. It stops one hand being replaced by a block, a cable tie or a knee while the other presses the button.
What is the difference between Type IIIA, IIIB and IIIC?
All three require synchronous actuation and continuous holding. IIIA has basic monitoring, IIIB adds fault detection to Category 3, and IIIC requires Category 4 architecture with faults detected at or before the next demand. The required type comes from the risk assessment.
Does two hand control protect other people?
No, and this is its central limitation. It guarantees only that the operator's hands are out of the hazard. Anybody else within reach is unprotected, which is why it is usually combined with guarding rather than used instead of it.

Keep reading