Skip to content
SILProof

Reliability · IEC 61508 failure data

FIT to MTBF calculator

Convert a failure rate between FIT, failures per hour and failures per year, and to MTBF or MTTF. Enter any one of them.

Examples
Advanced
h

8,760 h is 365 days, the usual basis in IEC 61508 data. Use 8,766 h for 365.25 days.

Probability that one device fails at least once within this time.

MTBF (= MTTF for a constant rate)Constant failure rate

228.3 years

FIT
500
Failures per hour
5 × 10⁻⁷
Failures per year
0.00438
MTBF
2 × 10⁶ h
MTBF
228.3 years
Failure probability in 1 year
0.437 %

Working

  1. λ = 500 FIT × 10⁻⁹ = 5 × 10⁻⁷ per hour
  2. λ per year = λ × 8,760 h = 0.00438 per year
  3. MTBF = 1 / λ = 1 / 5 × 10⁻⁷ = 2 × 10⁶ h = 228.3 years
  4. P(fail within 1 year) = 1 − e−λt = 1 − e−5 × 10⁻⁷ × 8,760 = 0.437 %

What the calculator is for

Failure data arrive in different units. A certificate or FMEDA states λDU in FIT, a reliability database in failures per 10⁶ hours, a maintenance system as failures per year, and a vendor brochure as MTBF. SIL verification, PFDavg and spurious-trip estimates all need the same quantity: a failure rate per hour. This converter puts every form side by side, so you can check a datasheet value or move a number between documents without a slip in the powers of ten.

  • FIT (failures in time) is failures per 10⁹ device-hours: 1 FIT = 10⁻⁹ per hour.
  • Failures per year = λ × 8,760 h.
  • MTBF = 1 / λ for a constant failure rate. For non-repairable items the same figure is called MTTF.

Worked example

A pressure transmitter certificate gives λDU = 250 FIT. That is 2.5 × 10⁻⁷ per hour, or 0.00219 dangerous undetected failures per device-year. The MTBF for that failure mode is 1 / 2.5 × 10⁻⁷ = 4 × 10⁶ h, about 457 years.

That does not mean the transmitter lasts 457 years. With 1,000 such transmitters on a site you should expect about 2.2 dangerous undetected failures every year. For a single channel proof tested once a year, PFDavg ≈ λDU × T / 2 = 1.1 × 10⁻³: try it in the PFD calculator.

Quick reference

FIT, failures per year and MTBF (8,760 h per year)
FITPer hourPer yearMTBF (years)
101 × 10⁻⁸8.76 × 10⁻⁵11,400
505 × 10⁻⁸4.38 × 10⁻⁴2,280
1001 × 10⁻⁷8.76 × 10⁻⁴1,140
2502.5 × 10⁻⁷0.00219457
5005 × 10⁻⁷0.00438228
1,0001 × 10⁻⁶0.00876114
5,0005 × 10⁻⁶0.043822.8

Common mistakes

  • Reading MTBF as a lifetime. It is the reciprocal of a rate during the useful-life period, not the age at which a device wears out.
  • Mixing failure modes. A total λ, λD and λDU differ by an order of magnitude or more. Convert the mode your calculation needs.
  • Per 10⁶ hours versus FIT. 1 failure per 10⁶ h is 1,000 FIT, not 1 FIT.
  • Hours per year. 8,760 h is usual. 8,766 h (365.25 days) changes the result by less than 0.1 %, so set it under Advanced only to match another document.

Basis

The conversion assumes a constant failure rate (the flat part of the bathtub curve), as IEC 61508-6 and IEC 61511 do for random hardware failures. The probability of at least one failure within time t is 1 − e−λt. Failure rates quoted at reference conditions (IEC 61709, SN 29500) still need adjusting for your temperature and stress.

SILProof

Have the failure rates for a safety function?

SILProof keeps the risk basis, SRS and three-gate SIL verification of each safety instrumented function on one record.

Use these rates in a full SIL verification

Frequently asked questions

How do I convert FIT to MTBF?

Divide 10⁹ by the FIT value to get MTBF in hours: 500 FIT gives 2,000,000 h. Divide by 8,760 for years: about 228 years.

What is the difference between MTBF and MTTF?

MTTF is the mean time to failure of an item that is not repaired; MTBF is the mean time between failures of a repaired item and includes the repair time. When repair takes hours and failures take years apart, the two are practically equal, and both equal 1/λ for a constant rate.

How many FIT is one failure per million hours?

1,000 FIT. One FIT is one failure per 10⁹ hours, so 10⁻⁶ per hour is 1,000 × 10⁻⁹.

Can I use MTBF directly in a PFDavg calculation?

Only after converting it to the dangerous undetected failure rate. PFDavg uses λDU, which is usually a fraction of the total failure rate behind a quoted MTBF.