Iron rust: how it forms and how to stop it

Iron rust: how it forms and how to stop it Building Materials
20 August 2026 Building Materials

Iron rust: how it forms and how to stop it

How iron rust forms, why oxidation of iron destroys concrete cover, and the practical steps that protect reinforcing steel in aggressive environments.

Rust is not a defect. It is iron going home. Iron exists in nature as oxide, locked inside ore. We spend enormous energy pulling it out of that state to make steel, then spend the rest of a structure's life stopping it from going back. Rust is that return journey.

Once you see it that way, the engineering question changes. You are not asking how to prevent oxidation permanently. You are asking how to slow it enough that it outlasts the design life of the structure.

What iron rust actually is

Iron rust is an electrochemical reaction, not simple surface wear. It needs three things present at once: iron, oxygen, and water. Remove any one and the reaction stops.

On a single piece of steel, microscopic areas behave as anodes and others as cathodes. Water acts as the electrolyte connecting them.

  • At the anode: iron atoms lose electrons and dissolve as ferrous ions.
  • At the cathode: those electrons are consumed as oxygen and water form hydroxide ions.
  • The result: the products combine into iron hydroxides, then oxidise further into the mixture of hydrated iron oxides we call rust.

Why iron rusts differently from aluminium

Aluminium oxidises too. But its oxide forms a thin, dense, tightly bonded film that seals the surface and halts further attack.

Rust does the opposite. It is porous, brittle, and poorly bonded. It flakes away and exposes fresh metal underneath.

That makes oxidation of iron self-accelerating. Every layer that spalls off opens the door to the next one. Aluminium protects itself. Iron does not.

The property that cracks concrete

Here is where rust stops being cosmetic and becomes structural.

Corrosion products — ferrous oxides, ferric oxides and iron hydroxides — occupy roughly two to six times the volume of the original metallic iron consumed, as documented in ACI 222R.

The exact expansion factor depends on which products form: goethite produces a two to threefold increase, lepidocrocite three to fourfold, and fully hydrated ferric hydroxide can reach five to six times.

Now picture a bar buried in hardened concrete, swelling to three times its original volume. The surrounding concrete has nowhere to go. The expansion generates tensile stress in the concrete ring around the bar.

Those internal stresses exceed the tensile strength of normal structural concrete, which typically sits around 2 to 4 MPa, producing longitudinal cracking parallel to the bar followed by spalling and delamination of the cover.

That is the mechanism. Invisible corrosion inside a column becomes a crack, then a fallen chunk of cover, then an exposed bar losing section.


Why iron and rust behave differently inside concrete

The passive layer

Reinforcing steel does not normally rust inside sound concrete, and the reason is chemistry rather than any coating.

The pore solution inside good concrete has a pH between 13 and 13.8. That high alkalinity forms an extremely thin, dense oxide film on the steel surface called the passive layer. While it holds, corrosion effectively cannot proceed.

This is the single most important fact in the subject: the concrete is the protection. Not paint. Not a coating applied on site. The concrete.

Every cause of rebar corrosion works the same way — by destroying that passive layer.

Cause one: carbonation

Carbon dioxide diffuses through concrete pores and reacts with calcium hydroxide, gradually lowering alkalinity.

Carbonation can reduce pH to below 9, and at that point corrosion initiation can begin.

The carbonation front advances inward at a rate governed by concrete quality. When it reaches the steel, passivity is lost and general, uniform corrosion begins along the bar.

ACI 222R identifies three factors that shorten the time to carbonation-induced corrosion: thin concrete cover, the presence of cracks, and high porosity from a low cement factor combined with a high water-to-cementitious ratio.

Cause two: chlorides

Faster and more dangerous.

Chloride ions break down the passive film locally, even at high pH. The result is not uniform loss but pitting — deep, localised cavities that cut through bar section at specific points while the rest of the bar looks intact.

Pitting is the harder failure to detect and the more serious one structurally. A bar can lose a large fraction of its capacity at one location and show almost nothing on the surface.

Chloride sources: seawater and marine spray, unwashed aggregate, contaminated mixing water, calcium chloride accelerators, and saline ground contact.

ACI 318 limits chloride content to 0.30% by weight of cement for reinforced concrete and 0.08% for prestressed concrete.

Cause three: insufficient cover

Cover is the first line of defence, and the relationship between cover depth and protection time is not linear.

The time for chloride ions to reach a bar at two inches from the surface is four times the time needed to reach a bar at one inch.

Double the cover, quadruple the protection. ACI 318 recommends a minimum of 1.5 inches of cover for most structural applications.

Yet inadequate cover remains one of the most common site defects, usually caused by too few spacers or by using stone fragments in place of proper chairs.

Cause four: concrete quality

Water-to-cement ratio governs porosity, and porosity governs how fast everything harmful gets in.

The practical guidance is to keep w/cm below 0.50 to slow carbonation, and below 0.40 to minimise chloride penetration.

Silica fume at 8–10% by weight of cement reduces corrosion risk substantially, partly by filling capillary pores and partly by cutting the chloride diffusion coefficient by up to 90%.

Adding water to improve workability is the cheapest decision on site and the most expensive over the structure's life.

Cause five: temperature

Most international guidance was written for temperate climates. In the Gulf, that guidance needs adjusting.

<cite index="67-1">Research from the Center of Excellence for Concrete Research and Testing at King Saud University in Riyadh examined chloride threshold values at 20, 35, 50 and 65 degrees Celsius under constant 80% relative humidity, and found the threshold to be strongly temperature-dependent.</cite>

The practical conclusion: hot-climate and coastal projects need thicker cover and denser concrete than the minimums quoted in general references. Copying temperate-climate specifications into a Gulf project is a durability decision, whether or not anyone intends it as one.


Preventing iron metal rust in structures

The order below is deliberate — highest impact and lowest cost first.

1. Dense concrete

Nothing substitutes for this.

  • Low w/cm. Use water reducers to achieve workability, not extra water.
  • Proper compaction. Honeycombing gives air and moisture direct access to steel.
  • Adequate curing. Seven days minimum. Curing completes hydration and closes pores; poorly cured concrete carbonates far faster.
  • Supplementary cementitious materials. Fly ash, slag and silica fume all cut permeability significantly.

2. Correct cover

  • Follow the specified cover; do not reduce it on site.
  • Use manufactured concrete or plastic spacers in adequate numbers.
  • Verify cover immediately before pouring, not after.
  • Increase cover above the minimum in coastal or high-temperature exposure.

3. Additional protection systems

Method How it works Best suited to Watch out for
Galvanized rebar Zinc corrodes sacrificially Humid environments, exposed elements Higher cost; avoid contact with aluminium
Epoxy-coated rebar Physical barrier Bridges, marine decks Any coating damage creates concentrated pitting
Stainless reinforcement Self-passivating via chromium Critical, long-life structures Substantially higher cost
Corrosion inhibitors Admixture strengthens passive layer Coastal projects Supplement, never a substitute for good concrete
Surface membranes Block water and chloride ingress Decks, car parks, tanks Require periodic maintenance
Cathodic protection Impressed current halts the reaction Repair of damaged structures Complex system needing ongoing monitoring

A note on site-applied paint

A recurring question: should reinforcement be painted with a rust preventer before pouring?

Generally no, unless the specification calls for it explicitly. Ordinary paints reduce bond between steel and concrete — and bond is the entire reason reinforced concrete works. Engineered coatings such as fusion-bonded epoxy are factory-applied under controlled conditions, not brushed on in a stockyard.


Surface rust on reinforcement: accept or reject

This is the argument that plays out on site between contractor and consultant more than any other.

Acceptable

Light orange surface film on bars stored outdoors. This layer:

  • Does not meaningfully reduce cross-section
  • Comes off with wire brushing
  • May slightly improve bond through added surface roughness
  • Is permitted under most specifications

Not acceptable

Rejection is warranted when you see:

  • Flaking or laminated scale that detaches when tapped
  • Visible pitting you can feel with a fingernail
  • Weight or diameter loss outside permitted tolerance
  • Reduced rib height on deformed bars, since ribs carry the mechanical bond

The field test

Wipe the bar with a stiff brush or coarse cloth:

  • Rust removes, sound metal beneath? → Accept and proceed.
  • Scale remains or pits appear? → Stop and call the consultant.
  • Thick flakes fall away? → Reject the bar.

The consultant makes the final call, and the decision should be documented.


Removing rust and repairing corroded elements

Before pouring

Hand wire brushing handles light surface rust and costs almost nothing.

Mechanical brushing suits larger quantities, with care not to damage ribs.

Abrasive blasting is highly effective but needs controlled pressure to avoid removing section.

Avoid acids and aggressive chemical cleaners. Residue left on the surface becomes a new corrosion source once encased in concrete — solving the visible problem while creating a worse hidden one.

Repairing an existing structure

Once rust shows through cracks or spalled cover, surface treatment is pointless. Proper repair follows a strict sequence:

  1. Engineering assessment — map the true extent using visual survey, hammer sounding, half-cell potential and resistivity measurements.
  2. Remove all affected concrete, including sound-looking concrete behind the bar. Partial removal creates an electrical differential that accelerates corrosion in adjacent areas — the well-known incipient anode effect.
  3. Clean steel back to sound metal by blasting or mechanical means.
  4. Assess remaining section. If loss exceeds the engineering allowance, add supplementary reinforcement with proper lap length.
  5. Apply bonding and corrosion-inhibiting treatment per the specified system.
  6. Rebuild with proprietary repair mortar — not ordinary concrete. Repair mortars are formulated for low shrinkage and compatible modulus.
  7. Apply surface protection to prevent recurrence.

Skipping step two is the most common repair failure. The patch looks fine for two years, then corrosion reappears at the edges of the repair.


Testing for corrosion

On site

  • Half-cell potential — maps probability of active corrosion through electrical potential differences, without demolition.
  • Concrete resistivity — low resistivity means easier ion movement and faster corrosion.
  • Carbonation depth — spray a freshly broken surface with phenolphthalein. Carbonated concrete stays colourless; sound concrete turns pink.
  • Cover meter survey — locates bars and measures actual cover non-destructively.
  • Hammer sounding — crude but effective for finding delamination.

In the laboratory

  • Chloride profiling from powder samples at graduated depths, plotting concentration against depth.
  • Tensile testing on extracted bar samples to measure real strength loss.
  • Weight loss measurement to quantify section consumed.
  • Chemical analysis to confirm the steel meets specification.

Where mill quality fits in

Manufacturing quality does not prevent rust. No structural steel is immune. What it determines is your starting point.

Controlled chemistry reduces the inclusions that act as corrosion initiation sites.

Dimensional accuracy ensures the cover you calculated is the cover you actually get. A bar oversized beyond tolerance quietly eats into cover depth.

Consistent rib geometry governs bond strength — the first property compromised by corrosion.

Proper mill storage before dispatch means steel does not arrive already corroding.

ALSSAD STEEL manufactures reinforcing steel bars to SASO ASTM 615 Grade 60, with laboratory testing on each production batch. You can review our quality certifications, see our production facilities, or browse the full product range including smooth round bar steel for stirrups and forming work.

For background on types and sizing, see our guide to reinforcing steel.


Frequently asked questions

What causes iron rust?

Rust requires iron, oxygen and water together. In concrete structures, the trigger is loss of the passive layer that high alkalinity normally provides — either through carbonation lowering pH, or chloride ions breaking the film locally.

Why does rust crack concrete?

Corrosion products occupy two to six times the volume of the steel consumed. That expansion inside a confined space generates tensile stress beyond concrete's tensile capacity, producing cracks along the bar and eventually spalling the cover.

Does surface rust on rebar need to be removed before pouring?

Light surface rust that wipes off to reveal sound metal is generally acceptable and may slightly improve bond. Flaking scale, visible pitting or measurable section loss is not acceptable. The consultant decides.

What is the difference between carbonation and chloride corrosion?

Carbonation lowers concrete pH and produces general, uniform corrosion along the bar. Chlorides attack the passive film locally and produce pitting — deep, concentrated section loss that is harder to detect and more dangerous structurally.

How do I prevent iron metal rust in reinforced concrete?

Dense concrete with a low water-to-cement ratio, adequate and verified cover, thorough compaction and proper curing. Galvanizing, epoxy coating, inhibitors and membranes are additional layers built on that foundation, not replacements for it.

Should reinforcement be painted before concreting?

Generally not. Ordinary paint reduces the steel-to-concrete bond that reinforced concrete depends on. Specialist coatings like fusion-bonded epoxy are applied at the factory under controlled conditions when the specification requires them.

How long before rebar corrosion appears?

It depends on concrete quality, cover depth and exposure. High-quality concrete with adequate cover inland can protect steel for decades. Poor concrete with thin cover in a coastal environment can show problems within a few years.


The short version

Iron rust in reinforced concrete does not start in the steel. It starts in the concrete around it.

Everything that protects a structure reduces to two things: dense concrete and adequate cover. Galvanizing, coatings and inhibitors are layers built on top of that foundation. None of them rescues a structure that lacks it.

Good steel does not prevent corrosion. What it does is guarantee you start from a sound baseline — and that the dimensions the engineer calculated are the dimensions that reached the site.

To discuss specifications or request pricing for your project, contact our team or request a quote.