Materials
Pitting Corrosion: The Microscopic Holes That Perforate Stainless Steel
A single chloride ion, roughly 0.18 nm across, is enough to punch through a passive film only 1–3 nm thick and start a hole that can bore through a 10 mm stainless plate in months while 99.9% of the surface stays mirror-bright. That is the treachery of pitting corrosion: it converts almost none of the metal to rust yet drills the one perforation that leaks a chemical reactor, floods a ballast tank, or ruptures a heat-exchanger tube.
In 1980 the Alexander L. Kielland accommodation platform capsized in the North Sea killing 123 people; a fatigue crack that started at a poorly welded hydrophone mount was the trigger, but localized chloride attack on load-bearing structure is a recurring theme in offshore failure reports. Pitting is the classic localized corrosion mode — high metal-loss rate over a tiny area, near-zero average corrosion rate — and it is why 316L is not automatically "seawater safe."
- MechanismChloride-driven passive-film breakdown → autocatalytic pit
- Key metricPREN = %Cr + 3.3·%Mo + 16·%N
- 316L PREN≈ 24–25 (marginal in seawater)
- StandardsASTM G48, G61, G150; ISO 17475
- Pit chemistryInternal pH ≈ 1–2, [Cl⁻] up to 6 M
- Penetration0.1–10 mm/yr locally; pitting factor 5–100
Interactive visualization
Press play, or step through manually. The visualization is yours to drive — try it before reading on.
Watch the 60-second explainer
A condensed visual walkthrough — narrated, captioned, under a minute.
The Passive Film and Why It Fails Locally
Stainless steel does not resist corrosion because chromium is noble — it isn't. It resists because chromium reacts with oxygen to form a self-healing passive film of chromium-rich oxyhydroxide (Cr₂O₃·xH₂O) only 1–3 nm thick. This film obeys a favorable Pilling–Bedworth ratio (PBR ≈ 2.0 for Cr₂O₃, between the ideal 1 and 2), so it is dense, adherent, and electronically insulating. As long as it is intact, the passive current density sits around 0.1–1 µA/cm², corresponding to a uniform corrosion rate below 0.001 mm/yr — effectively zero.
The problem is that the film is not perfect. It has weak spots at MnS inclusions, grain boundaries, sigma-phase precipitates, and mechanical scratches. Aggressive anions — above all chloride (Cl⁻), but also bromide and iodide — adsorb at these defects, catalyze the local dissolution of the oxide, and prevent it from re-passivating. Once the film ruptures at one spot while the surrounding surface stays passive, you have set up a tiny anode (the pit) surrounded by an enormous cathode (the whole passive plate). The area ratio does the damage: a large cathode drives a huge current density into a pinhole anode.
The Autocatalytic Pit: How a Pinhole Feeds Itself
What makes pitting so vicious is that a growing pit generates its own aggressive environment — it is autocatalytic. Inside the pit the anodic reaction is metal dissolution:
- Anode (inside pit): M → Mⁿ⁺ + n e⁻ (e.g. Fe → Fe²⁺ + 2e⁻, Cr → Cr³⁺ + 3e⁻)
- Cathode (outside, on the passive surface): O₂ + 2H₂O + 4e⁻ → 4OH⁻
The metal cations accumulating in the pit are positively charged, so chloride ions migrate in to maintain electroneutrality — concentrations inside the pit can reach 3–6 M, many times the bulk. These metal chlorides then hydrolyze:
Mⁿ⁺ + n H₂O → M(OH)ₙ + n H⁺
The liberated H⁺ crashes the local pH to roughly 1–2 even when the bulk solution is neutral seawater. Now the pit interior is a hot, concentrated, acidic chloride solution that dissolves metal faster still, drawing in more chloride, generating more acid. The pit mouth is often capped by a porous corrosion-product membrane that seals in this brew and cuts off oxygen, ensuring the interior can never re-passivate. Growth is diffusion-limited and can proceed at 0.1–10 mm/yr locally even though the plate's average corrosion rate is unmeasurably small.
Pitting Potential, CPT, and the Electrochemistry of Onset
Pitting has a threshold. Sweep the electrode potential up in a chloride solution (a cyclic potentiodynamic polarization test, ASTM G61) and current stays low and passive until you reach the pitting potential E_pit (also E_b, breakdown potential), where current spikes as stable pits nucleate. Sweep back down and pits keep growing until the potential falls below the repassivation (protection) potential E_rp, always more negative than E_pit. The gap E_pit − E_rp is a measure of susceptibility — a wide hysteresis loop means pits, once started, are hard to stop.
Temperature is the other lever. Below a sharp threshold called the critical pitting temperature (CPT), stable pits will not propagate no matter how long you wait; above it they run. CPT is measured per ASTM G48 (Method A/C, 6% FeCl₃) or the more precise electrochemical G150. It is nearly a material constant for a given alloy and the single most useful design number: 316L sits near 10–15 °C, 2205 duplex near 35 °C, and 6% Mo super-austenitics near 65–70 °C. Engineers pick the alloy whose CPT comfortably exceeds the hottest chloride-wetted surface temperature in service.
PREN: The One Number Engineers Actually Use
You rarely run a polarization curve to spec an alloy — you compute the Pitting Resistance Equivalent Number (PREN), a weighted sum of the elements that stabilize the passive film:
PREN = %Cr + 3.3 × %Mo + 16 × %N
(For super-duplex grades a tungsten term, PREW = %Cr + 3.3(%Mo + 0.5%W) + 16%N, is common.) The coefficients encode metallurgy: molybdenum is 3.3× more potent than chromium at repairing and strengthening the film, and nitrogen is 16× — nitrogen also concentrates ahead of a growing pit and buffers the acidification. Representative values:
- 304L: PREN ≈ 19 — pits at room temperature in seawater.
- 316L (2–3% Mo): PREN ≈ 24–25 — the workhorse, but marginal in warm chlorides.
- 2205 duplex: PREN ≈ 35 — good general marine grade.
- 254 SMO / AL-6XN (6% Mo): PREN ≈ 43 — reliable in ambient seawater.
- Alloy 625, C-276: PREN ≈ 50–70 — effectively immune.
Rule of thumb: PREN ≥ 40 for ambient seawater. But PREN is a screening tool, not a guarantee — it ignores microstructure, welds, and surface finish, all of which can drop real-world resistance well below the number suggests.
Sizing the Damage: Faraday's Law and the Pitting Factor
To turn a measured pit current into a penetration rate you use Faraday's law. The mass dissolved is m = (I·t·M)/(n·F), where I is pit current (A), t is time (s), M is atomic mass (g/mol), n is the number of electrons per atom, and F = 96 485 C/mol. Dividing by density ρ and pit cross-section A gives the depth rate. A single stable pit passing just 10 µA over 1 cm² of pit floor drives penetration on the order of 0.1 mm/yr — small until you realize it is concentrated at one point that must not perforate.
The severity of localization is captured by the pitting factor: the depth of the deepest pit divided by the average metal loss. Uniform corrosion has a pitting factor of 1; aggressive pitting can hit 5 to 100. That is why average-rate design (a corrosion allowance of, say, 3 mm over 20 years) is useless against pitting — the average loss might be 0.05 mm while one pit is already through the wall. Pit-depth distributions are inherently statistical, so engineers analyze deepest-pit data with extreme-value (Gumbel) statistics to extrapolate the worst pit likely on a large area from measurements on small coupons.
Where It Bites: Real Hardware and Failure Modes
Pitting shows up wherever a passive alloy meets stagnant, warm, or concentrated chlorides:
- Heat-exchanger and condenser tubes: thin walls (0.5–1 mm), warm surfaces, and stagnant zones under deposits. A single perforated 316 tube contaminates the whole shell side and forces a shutdown.
- Ship ballast tanks, propeller shafts, and offshore risers: seawater is the archetypal pitting environment; super-duplex and 6-Mo alloys are specified for critical marine service.
- Swimming-pool and covered-atrium structures: the notorious failure — chloramine-laden air condenses on load-bearing 304/316 hangers, causing chloride-induced stress corrosion cracking seeded by pits. Multiple ceiling collapses (e.g. Uster, Switzerland, 1985) killed swimmers; standards now demand PREN ≥ 40 alloys or non-metallic supports overhead.
- Chemical process piping and bleaching plants: hot bleach (hypochlorite) is a torture test for anything below super-austenitic grades.
Pitting rarely acts alone. Pits are stress raisers with a sharp radius, so they are prime fatigue-crack and stress-corrosion-cracking initiation sites — the pit does the drilling, then a crack finishes the job. Underneath gaskets, washers, and deposits, the same chemistry becomes crevice corrosion, which initiates at even lower potentials and temperatures than open-surface pitting.
Designing and Testing Against Pitting
Best practice attacks pitting on four fronts — material, environment, geometry, and electrochemistry:
- Alloy selection: match CPT to the hottest chloride-wetted temperature and keep a margin; use PREN ≥ 40 for seawater. Specify low-carbon (L-grade) or stabilized alloys and control welding to avoid sensitization and sigma phase, which locally deplete chromium.
- Surface and geometry: pickle and passivate welds (ASTM A380/A967) to restore the film and dissolve embedded iron; a smooth, deposit-free surface (Ra low) removes nucleation sites. Design out crevices — full-penetration welds instead of lap joints, no stagnant dead legs, self-draining vessels.
- Environment control: lower chloride, raise pH, deaerate, or dose corrosion inhibitors; keep temperature below CPT where possible.
- Electrochemical protection: cathodic protection (sacrificial anodes or impressed current) pushes the potential below E_rp so pits cannot propagate — the mainstay for ship hulls, jetties, and buried pipe.
Qualification is standardized: ASTM G48 (ferric-chloride immersion, pass/fail and CPT), ASTM G150 (electrochemical CPT), ASTM G61 (cyclic polarization for E_pit/E_rp), and ASTM G46 for rating pit density, size, and depth after exposure. The governing trade-off is blunt: higher Mo, N, and Cr content buy dramatically higher CPT and PREN but at 3–10× the material cost and worse machinability — so engineers spend alloy content exactly where a perforation would be catastrophic, not everywhere.
| Alloy | PREN | CPT (°C) | Seawater verdict |
|---|---|---|---|
| 304L stainless | ≈ 19 | < 5 (pits at RT) | Fails — avoid in chlorides |
| 316L (2% Mo) | ≈ 24–25 | ≈ 10–15 | Marginal; pits in warm seawater |
| 2205 duplex | ≈ 35 | ≈ 35 | Good for many marine uses |
| 254 SMO (6% Mo) | ≈ 43 | ≈ 65–70 | Excellent in seawater |
| Alloy 625 / C-276 | ≈ 50–70 | > 85–100 | Immune in most service |
Frequently asked questions
Why does stainless steel pit when plain carbon steel just rusts uniformly?
Because stainless relies on a thin passive chromium-oxide film that is either intact everywhere or broken at one spot. Chloride breaks it locally, creating a tiny anode against a huge passive cathode, so all the corrosion current focuses on a pinhole. Carbon steel has no protective film, so it corrodes more or less uniformly and much more predictably.
What makes chloride so specifically destructive compared with other ions?
Chloride is small (≈ 0.18 nm), highly mobile, and forms soluble metal chlorides that don't re-form a protective oxide. It adsorbs competitively at film defects, migrates into the pit to balance charge, and its metal chlorides hydrolyze to drop the internal pH to 1–2. Sulfate and nitrate, by contrast, often act as inhibitors and can even raise the pitting potential.
Is 316L stainless steel safe for seawater?
Not reliably. Its PREN of about 24–25 and CPT near 10–15 °C mean it will pit in warm, stagnant, or crevice-forming seawater conditions. It works for splash-zone and flowing-cool service but for continuous or warm seawater you need duplex (2205), 6% Mo super-austenitics (254 SMO, AL-6XN), or nickel alloys with PREN ≥ 40.
How do you predict pit depth over a plant's lifetime?
You can't use an average corrosion rate — the pitting factor may be 10–100. Instead you expose coupons or inspect in service, record deepest-pit depths, and fit them with extreme-value (Gumbel) statistics to extrapolate the worst pit expected over the full component area and time. Combined with wall thickness this gives a probability of perforation rather than a single deterministic date.
Why is crevice corrosion considered worse than open pitting?
A crevice — under a gasket, washer, deposit, or lap joint — creates a pre-formed occluded, oxygen-starved region, so it skips the hard part of pit initiation. Crevices initiate at lower potentials and lower temperatures (the critical crevice temperature is typically 15–20 °C below the CPT). That's why good design eliminates crevices and standards test for both modes.
How does cathodic protection stop pitting?
It shifts the metal's potential below the repassivation potential E_rp, the value at which existing pits can no longer propagate and the passive film reforms. Sacrificial zinc or aluminum anodes, or an impressed-current system, supply that polarizing current. It protects ship hulls, offshore jackets, and buried pipelines, and is often paired with coatings so the anodes only have to protect coating holidays.