Emergency Alert Message Templates: Examples by Scenario and Platform

Emergency alert message templates are pre-written, fill-in-the-blank scripts that let an organization send a clear, complete warning in seconds instead of drafting one under pressure. A working template names the hazard, tells the recipient exactly what to do, identifies the location, gives a time frame, and points to where updates will appear. The examples below cover the situations most organizations need to be ready for, with short and long versions where the sending platform matters.

The Five Elements Every Template Must Contain

FEMA’s IPAWS guidance identifies five content elements that belong in every emergency alert: the source of the warning, the hazard, the hazard’s expected impact, the affected location, and the protective action the recipient should take.1Federal Emergency Management Agency. IPAWS Best Practices Guide Drop any one of them and the alert stops working. A message that says “TORNADO WARNING — seek shelter immediately” but names no location forces every recipient to guess whether they are in danger. A message that names the location and hazard but skips the protective action leaves people knowing they are in trouble without knowing what to do.

Put the most critical information first. Lead with the hazard and the required action, then location, timing, and where to get updates. Be concrete about the action: instead of “shelter in place,” say “go to the lowest floor of the building, find an interior room, crouch down, and cover your head and neck.”1Federal Emergency Management Agency. IPAWS Best Practices Guide Every template should also carry a field for the issuing authority spelled out in full, and a next-update time or URL so recipients know when to look for more information.

Character Limits by Platform

The sending channel dictates length. Wireless Emergency Alerts originally capped messages at 90 characters. Devices on 4G LTE and newer networks now support up to 360 characters of free-form text, but alert originators must still send a 90-character version alongside the longer one to reach people on older networks.2Federal Communications Commission. Wireless Emergency Alert Enhancements FAQs for Authorized Alert Originators For WEA distribution, every template needs two versions: a compressed one that hits the essentials in under 90 characters, and an expanded one that uses the full 360.

Standard SMS breaks at 160 characters in English. Go over that and the message splits into segments that may arrive out of order during network congestion, which is exactly what happens in real emergencies. Keep SMS templates under 160 characters, or design them so each segment reads on its own. Email and push notifications allow more room, but people scan alerts. Brevity still wins.

Active Threat and Security Alert

Security threats need the most stripped-down language of any template. There is no room for context in the first message. The Department of Homeland Security recommends a three-tier response for active threat situations: evacuate if you can, hide if you cannot evacuate, and fight back only as an absolute last resort.3Department of Homeland Security. Active Shooter – How to Respond

A 90-character WEA version:

ACTIVE THREAT at [BUILDING]. Leave area now. If trapped, lock door, stay silent. Call 911.

A longer SMS or email version:

EMERGENCY: Active threat reported at [LOCATION] at [TIME]. Leave the area immediately if you can do so safely. If you cannot leave, go to a room with a lockable door, barricade the entrance, silence your phone, and stay out of sight. Do not open the door for anyone. Police are responding. Call 911 only if you are injured or can provide the suspect’s location. Next update in 15 minutes or at [URL].

DHS guidance notes that evacuating people should leave belongings behind, keep their hands visible, and follow police instructions once outside.3Department of Homeland Security. Active Shooter – How to Respond Include those specifics in a longer follow-up if the initial alert cannot fit them.

Fire and Building Evacuation

Fire alerts flip the priority from sheltering to movement. Name the building, direct people to exits, and give a safe assembly point.

FIRE ALERT: Fire reported in [BUILDING NAME]. EVACUATE NOW using the nearest stairwell. Do not use elevators. Proceed to [ASSEMBLY POINT]. Follow fire marshal instructions. Next update in 15 minutes.

The assembly point varies by building, so leave it as a clearly labeled blank and assign someone to fill it in for each facility before the template is ever needed.

Tornado Warning

TORNADO WARNING for [AREA/ZONE] until [TIME]. Take shelter NOW in an interior room on the lowest floor. Stay away from windows. If outdoors, lie flat in a ditch and cover your head. Monitor [FREQUENCY/URL] for updates.

Notice the specificity of the protective action. “Interior room on the lowest floor” is faster to act on than “seek shelter” because it eliminates a decision the recipient would otherwise make under stress.1Federal Emergency Management Agency. IPAWS Best Practices Guide

The American Meteorological Society recommends that weather warnings go only to people physically within the National Weather Service warning polygon, not to an entire county or metro area.4American Meteorological Society. Best Practices for the Dissemination of Weather Warnings to the Public Over-alerting erodes trust; people who receive irrelevant warnings learn to ignore all of them.

Flash Flood Warning

FLASH FLOOD WARNING for [LOCATION] until [TIME]. Avoid all flooded roads and low-lying areas. If driving, turn around, do not attempt to cross flowing water. If in a flood-prone area, move to higher ground immediately. Updates at [URL].

Six inches of fast-moving water can knock down an adult, and 12 inches can sweep away most cars.5National Weather Service. Turn Around Don’t Drown The “turn around” instruction addresses the most common fatal mistake during flash floods and belongs in every flood template.

Hazardous Material Release

HAZMAT ALERT: Chemical release reported near [LOCATION]. SHELTER IN PLACE. Close all windows and doors. Turn off heating, air conditioning, and ventilation systems. Seal gaps under doors with wet towels. Do not go outside until authorities issue an all-clear. Updates at [URL] or [FREQUENCY].

Shelter-in-place instructions for a chemical release are more detailed than for a security threat because most people do not instinctively think to shut off HVAC. If your facility is near rail lines, highways, or industrial sites, keep this template near the top of the library.

Water Contamination

A boil-water advisory has to cover more than drinking. The FCC’s proposed form-fillable templates instruct recipients to bring water to a full rolling boil for three minutes, let it cool before use, avoid ice made from unboiled water, use ready-to-use formula for infants, and keep pets from drinking unboiled water.6Federal Communications Commission. Proposed Form-Fillable Alert Templates in English That level of specificity is the standard. An advisory that just says “boil your water before drinking” misses half the exposure routes people encounter in a day.

Utility Outage

ALERT: Power outage affecting [BUILDING/CAMPUS/AREA]. Crews are responding. Estimated restoration: [TIME]. Avoid elevators. Use flashlights, not candles. Emergency lighting is active in stairwells and exits. If you require powered medical equipment, contact [NUMBER] for assistance. Updates at [URL].

IT or Network Failure

NOTICE: Email and network services are currently unavailable across [AREA/DEPARTMENT]. IT staff are working to restore service. Estimated resolution: [TIME]. Use cell phones for urgent communication. For critical system access, contact [HELPDESK NUMBER]. Status updates at [URL].

The line naming an alternative communication channel matters. If the email system is down, telling people to check their email for updates signals that whoever sent the alert did not think it through.

Cybersecurity Incident

Ransomware and breach templates require a counterintuitive protective action: stop using the systems people rely on. CISA’s federal incident notification guidelines require federal agencies to report cybersecurity incidents within one hour of identification and to include functional impact, the type of information compromised, and an estimated recovery timeline.7Cybersecurity and Infrastructure Security Agency. Federal Incident Notification Guidelines Private organizations are not bound by those specific federal rules, but the required data elements make a useful checklist.

SECURITY ALERT: A cybersecurity incident has been detected affecting [SYSTEMS/NETWORK]. Do NOT log in to any company systems. Do NOT open email attachments. Disconnect your computer from the network if instructed. Use personal devices and phone calls for urgent business communication only. IT security is investigating. Do not discuss details of this incident on social media or with external parties. Next update at [TIME] via [CHANNEL].

CISA also cautions against including sensitive personally identifiable information in incident reports or internal notifications.7Cybersecurity and Infrastructure Security Agency. Federal Incident Notification Guidelines The template should remind the drafter not to name specific compromised individuals or include account numbers, Social Security numbers, or similar data in the alert itself.

All-Clear and Partial Recovery

The all-clear message is the one most organizations draft last and get wrong. After an hour of carefully worded alerts, someone types “all clear, back to normal” and moves on. That leaves recipients without information about what happened, whether any areas are still restricted, or where to go for help.

ALL CLEAR: The [INCIDENT TYPE] at [LOCATION] has been resolved as of [TIME]. It is safe to resume normal operations. Building access is fully restored. If you need medical attention or wish to report property damage, contact [NUMBER]. A full incident summary will be posted at [URL] by [DATE].

When the situation is stabilized but not fully resolved, use a separate template that makes the partial nature of the resolution explicit:

UPDATE: The [INCIDENT TYPE] at [LOCATION] is contained. [BUILDING/AREA] remains restricted until further notice. All other areas are open. Safety personnel are monitoring the scene. Do not enter the restricted zone. Next update at [TIME] or at [URL].

The after-action link matters. People who lived through a scare want to understand what happened, and providing that through a formal channel reduces rumor-spreading.

Accessibility and Multilingual Versions

An alert that reaches only people who can hear it or read English is not effective. Federal accessibility standards require that any building equipped with an emergency warning system include both audible and visual alarm components, with visual alarms installed at minimum in restrooms, hallways, lobbies, meeting rooms, and other common-use areas. When an existing fire alarm system is upgraded or replaced, the new system must also comply.8U.S. Access Board. Bulletin #2 – Visual Alarms

For wireless alerts, the FCC adopted rules in 2023 requiring wireless providers participating in WEA to support multilingual message templates in the thirteen most commonly spoken languages in the United States, plus American Sign Language. The compliance deadline is June 12, 2028.9Federal Communications Commission. FCC Announces Compliance Date for ASL and Multilingual Wireless Emergency Alert Templates Capable devices will display the alert in the subscriber’s selected language when a template is available.

Even before that deadline, look at who you are actually alerting. If a significant portion of your workforce or community communicates primarily in a language other than English, translate your highest-priority templates and have a fluent speaker review each one. Machine translation is not reliable enough for life-safety messages.

OSHA Alignment for Workplace Templates

Employers covered by OSHA must maintain a written emergency action plan that includes procedures for reporting emergencies, evacuation routes and exit assignments, and a contact list for employees who need more information.10eCFR. 29 CFR 1910.38 – Emergency Action Plans The plan must be kept in the workplace and available for employee review. Employers with ten or fewer employees may communicate the plan orally instead of in writing.

OSHA also requires an employee alarm system that uses a distinctive signal for each type of emergency.10eCFR. 29 CFR 1910.38 – Emergency Action Plans Your text templates should match those signals. If a continuous tone means “evacuate” and a pulsing tone means “shelter in place,” the message people receive on their phones should give the same instruction as the alarm they hear.

The plan must be reviewed with every covered employee when it is first developed, when the employee’s role under the plan changes, and whenever the plan is updated.10eCFR. 29 CFR 1910.38 – Emergency Action Plans Templates sitting in a folder no one has seen do not satisfy this requirement. Build template review into onboarding and annual safety training.

Testing the Templates Before You Need Them

A template you have never tested under realistic conditions will fail when it matters. Quarterly drills that exercise the full alert chain — from the person selecting the template, through the system that sends it, to the recipients who act on it — surface problems no other method finds. Common failures include outdated assembly point locations, phone numbers that ring to disconnected lines, URLs that point to pages no longer online, and character counts that exceed platform limits because someone added a line after the last review.

After each drill, debrief. How long from scenario trigger to alert delivery? Did recipients understand what to do? Did the message reach people with disabilities? Did anyone not receive it? Document every change you make to a template and the reason for it. That record becomes valuable during budget requests and post-incident reviews.