Evaluating a hipot tester for purchase or use means checking the features that control the risk of the test, not only the voltage and power ratings. The features that matter are interlocks that prevent energisation in an unsafe state, remote and emergency stop control, ground and return continuity monitoring, controlled output and discharge behaviour, and clear indication of the test state.

Each feature should be traced to a hazard it controls, and the evaluation should verify the features work before the tester is used on a live test.

The Safety Features a Hipot Tester Should Have

The purpose of safety features is to make the dangerous states of a hipot test unreachable or controlled: energisation while the circuit is incomplete, energisation while someone is in the test area, and contact with a charged circuit after the test. The features that achieve this are the interlocks and monitors that prevent the first two, and the discharge and indication behaviour that controls the third. A tester whose only protection is a warning label has not been designed for the hazard; the evaluation should look for features that act on the circuit, not messages that rely on the operator.

The list of features should be matched to the site procedure. A tester used by a single operator in a workshop has different needs from one used by a team in the field with remote control and a distant test object. The evaluation starts from the hazards of your own work and asks which features close which gaps, rather than collecting features without linking them to a risk.

Interlocks, Remote Control and Emergency Stop

An interlock prevents the high voltage from being applied until defined conditions are met, such as the test circuit being complete and the return connection sound. A remote interlock input allows the tester to be connected to a perimeter switch or door contact, so that opening the access point removes the energisation permission. These interlocks convert the area control rule from an operator responsibility into a circuit behaviour, which is what makes them more reliable than procedure alone.

Remote control and an emergency stop complete the control picture. Remote control lets the operator start, stop and monitor the test from a position outside the immediate hazard zone, and an emergency stop provides an immediate, unambiguous way to remove the output when something unexpected happens. The evaluation should confirm that the emergency stop is accessible from the operator’s position, that the remote link cannot fail in a way that leaves the output energised, and that the tester returns to a safe state when communication is lost.

Ground and Return Continuity Monitoring

Ground continuity monitoring checks that the protective ground and the return path are intact before and during the test. A broken ground can leave the test object and the tester at an uncontrolled potential, and a broken return can make the measurement meaningless while the output continues. A tester with ground monitoring refuses to energise, or stops the test, when the continuity check fails, and it indicates the fault clearly so the operator can correct the connection.

The monitoring should cover the connections that the operator actually makes, not only the internal ground of the tester. The evaluation should confirm what the monitor measures, how it indicates a fault and whether it re-checks continuity during the test, because a connection that fails mid-test is as dangerous as one that was never made.

Output Control and Discharge Behaviour

Output control determines how the voltage is raised, held and removed. A tester with controlled ramp capability allows the operator to follow the step plan the procedure requires, while a tester that jumps to the set voltage reduces the operator’s ability to watch the behaviour during the ramp. The output should also have a defined response to a fault in the test object: the current limit and trip behaviour should remove the output quickly and return the circuit to a controlled state rather than sustaining the fault.

Discharge behaviour is the final part of output control. For a DC test, the tester should discharge the test object through a controlled path and indicate when the circuit is safe to touch, and the discharge should be verified with a separate voltmeter as part of the procedure. For an AC test, the tester should provide a controlled shutdown sequence. The evaluation should confirm that the discharge function matches the source type and the expected load, because a discharge circuit rated for a small load may not handle the stored energy of a large cable or machine.

Verifying Features Before Purchase or Use

Safety features are verified by test, not by brochure. Before purchase, ask for a demonstration in which the interlocks are proven: an incomplete circuit that refuses to energise, an open access interlock that removes the output, a broken ground that stops the test and an emergency stop that works from the operator’s position. Before each use, the same checks are performed quickly as part of the preparation, because a feature that worked last week can fail this week.

The verification record belongs with the equipment file. Each tester should have a documented check that its interlocks, ground monitor, emergency stop and discharge function were proven on a defined date, with the result recorded. A tester whose safety features cannot be verified is not ready for use, regardless of its voltage rating.

From Features to a Safe Test Procedure

Use the table to build the evaluation checklist and the pre-use checks. The features are the hardware side of the safety procedure; the operator discipline is the other side, and both must be present for the test to be safe.

Clear indication of the test state is a feature in its own right. The tester should unambiguously show when the output is energised, when it is ramping, when it is holding and when the circuit is safe, using indications that are visible from the operator’s position and that cannot be confused. A high voltage test that depends on the operator remembering whether the output is live is an incident waiting to happen, particularly at the end of a long test when attention fades. Look for indicators that change state with the output, an audible or visual alarm when the output is energised, and a clear “safe” indication after discharge that is tied to the measured circuit condition rather than to a timer. The evaluation should also include the training requirement: the features are only effective if the operators know what each one does, how to test it and what to do when it operates. Build the feature checks into the operator training and the pre-use procedure, and record that each operator has demonstrated the emergency stop and discharge sequence before they work alone with the tester.

Frequently Asked Questions

Which interlocks matter most on a hipot tester?

The interlocks that prevent energisation with an incomplete or unsafe circuit matter most, together with the remote interlock input that lets the tester be tied to the access control of the test area. Verify each interlock by test before use.

How does ground continuity monitoring work?

Ground continuity monitoring checks that the protective ground and return path are intact before and during the test. If the continuity check fails, the tester refuses to energise or stops the test and indicates the fault, so the operator can correct the connection before proceeding.

Why is discharge behaviour part of the safety feature evaluation?

The discharge function controls the stored energy of the test circuit after the output is removed. For a DC test the tester should discharge the object through a controlled path and indicate when it is safe, and for an AC test it should provide a controlled shutdown. The discharge capability must match the expected load.

For hipot test equipment and the method selection framework, see the high voltage insulation and withstand testing page.