The Passive Layer

Aluminum is one of the most reactive metals we use. It wants oxygen so badly that you can use it to tear oxygen out of other metals' oxides — that is what thermite is, powdered aluminum stripping the oxygen off iron rust and releasing enough heat in the trade to weld railroad track. By rights a metal that eager should not last an afternoon outdoors; it should burn slowly back into ore. And yet aluminum window frames sit in the weather for decades, aluminum foil comes off the roll bright, aircraft made of the stuff fly for thirty years. The reason is not that aluminum resists corroding. The reason is that it corrodes instantly, and corroding instantly is exactly what saves it.

The moment a clean aluminum surface meets air, it grows a skin of aluminum oxide a few nanometers thick — a film so thin it is invisible, a few hundred atoms deep — and that film is dense, and it bonds tightly to the metal underneath, and it is closed. Oxygen can no longer reach the metal through it. So the corrosion that would have eaten the whole block stops itself after a few hundred atoms, sealed off by its own product. The film is self-limiting: it is the barrier that its own formation builds. And it is self-healing — scratch down to bare metal and the fresh surface re-oxidizes and begins sealing within moments; researchers imaging it at the atomic scale have watched the oxide flow almost like a liquid over newly exposed metal when the surface was mechanically strained. The metal's hunger for oxygen is not its weakness; it is what closes the surface again, over and over, faster than anything can wear it open.

What makes this remarkable is that reactivity alone does not do it, and the proof is iron. Iron is also reactive; iron also seizes oxygen readily. But when iron oxidizes it makes rust, and rust is everything aluminum oxide is not — porous, loose, flaky, badly matched to the metal it sits on. It does not seal; it sheds. It crumbles off and exposes fresh iron, which rusts and crumbles in turn, and the corrosion marches inward until there is nothing left but a stain. Two metals, the same appetite for oxygen, opposite fates — and the difference has nothing to do with how reactive they are. It is entirely about what the corrosion leaves behind: a barrier, or a doorway.

There is a rough rule for which you get, worked out by two metallurgists named Pilling and Bedworth in 1923. Compare the volume of the oxide to the volume of the metal it consumed. If the oxide is smaller than the metal it replaces, it cannot cover the surface — it cracks and leaves gaps, and the metal keeps corroding through them. If the oxide is far larger, it builds up internal stress as it grows, buckles, and spalls off, which is iron's problem. But in the window between, where the oxide is just a little bigger than the metal it came from, it lies down dense and coherent and tight, and it protects. Aluminum's oxide sits comfortably in that window. Iron's runs too big and sheds. It is a satisfying rule, and like most satisfying rules it frays when you lean on it: chromium's oxide is nearly as bulky as iron's yet protects beautifully, because coverage is not the whole story — how well the film sticks, how much it can flex without cracking, all matter too. And the ratio was measured in furnaces, for metals oxidizing dry and hot, and only roughly carries over to a window frame standing in the rain. It tells you most of the why, not all of it.

The same trick, deliberately engineered, is what stainless steel is. Mix at least about a tenth chromium into iron and the alloy grows a thin, adherent, self-healing film of chromium oxide that does for the steel what aluminum's skin does for aluminum — seals it, and reseals it when scratched. The steel carries its own passivation built into the recipe, which is why a stainless knife shrugs off what would rust a plain one to lace. It took a while to find: Harry Brearley in Sheffield is usually credited with it around 1913, looking for a gun-barrel steel that would not pit, though as with most such things several people were circling it at once. And before we learned to make it cheaply, the metal that armors itself was itself a luxury: the very tip of the Washington Monument, set in place in 1884, is a cast point of pure aluminum, worth then about twice its weight in silver — a fitting jewel for the tallest structure on earth. Two years later the Hall–Héroult process arrived and the price collapsed toward the foil in your kitchen drawer.

None of this is unconditional, and the place it breaks is worth knowing, because it is the same place every time: chloride. Salt. A chloride ion is small and aggressive enough to pry into the passive film at its weak points and keep it from resealing, and where it gets in, the metal pits — corrodes in deep narrow holes while the surface around them still looks perfect. It is why stainless still rusts at the seaside and on salted winter roads, why aluminum boats corrode, why "stainless" was always a slight overstatement. The passive layer is not a victory over corrosion. It is a truce with it — a controlled, self-sealing, perpetually-renewed small corrosion that holds the larger one off, for as long as nothing comes along that the seal cannot close over.