Abstract: A fuel cell system is disclosed, which includes an anode recirculation loop including a fuel cell stack for generating power, a fuel supply device for providing a fuel to the anode recirculation loop, an air supply device for providing air to a cathode of the fuel cell stack, a voltage monitoring device for monitoring a voltage of the fuel cell stack, and an anode protection controller. The anode protection controller decreases a current drawn from the fuel cell stack by a predetermined amount whenever the voltage of the fuel cell stack drops below a predetermined voltage threshold and decreases a fuel flowrate provided to the anode recirculation loop based on the decreased current, so as to maintain a steam to carbon ratio in the anode recirculation loop above a predetermined steam to carbon ratio limit. A shutdown method for the fuel cell system are also disclosed.