Most people think planes have one hydraulic system, but they actually have several completely separate ones. The first hydraulic system powers the flight control surfaces, like ailerons and elevators. The second system is dedicated entirely to lowering, raising, and locking the landing gear. The third system handles all wheel braking, completely independent from the first two. If one system fails, the pilots still have control of the plane and can land safely. Every hydraulic system has its own dedicated engine driven pump that works independently. If an engine pump fails, an electric pump instantly kicks in to keep that system running. Each system stores its own hydraulic fluid in completely isolated tanks throughout the aircraft. Separating the systems means a fire in one area cannot destroy all three at once. The flight deck has separate pressure gauges for each hydraulic system visible to the crew. If one system fails, pilots follow specific procedures to land using the remaining systems. Large aircraft like the Airbus A380 actually have four independent hydraulic systems for extra safety. This belt and suspenders approach means hydraulic failure is no longer a catastrophic event. Understanding these backup systems shows why modern flying is extraordinarily safe today.
How Aircraft Carry Multiple Hydraulic Systems
When you push the yoke in a modern airplane, you are not directly moving the control surfaces. Instead, you are commanding a hydraulic system, a network of pressurized fluid that translates your inputs into physical movement of wings, tail, landing gear, and brakes. This hydraulic architecture is one of aviation's most elegant safety inventions, and it works very differently than most people imagine.
Why Hydraulics Power Aircraft
Hydraulic systems move aircraft control surfaces because they solve a fundamental engineering problem. As planes grew larger and faster throughout the twentieth century, the forces needed to move control surfaces became too great for cables and pulleys alone. A pilot's arm cannot physically move a 50 foot aileron against wind pressure at 500 miles per hour. Hydraulic fluid, confined in sealed lines and pushed by powerful pumps, multiplies force and allows human input to command massive surfaces. The beauty of hydraulics is precision: a pilot can feel subtle pressure feedback through the yoke while commanding vast amounts of power.
The Multiplication of Systems
The critical insight that changed aircraft safety was this: if one hydraulic system fails completely, the plane becomes uncontrollable and may crash. So modern aircraft design does not tolerate single points of failure. Instead, engineers split hydraulic responsibilities across completely separate systems, each with its own pump, its own fluid supply, and its own network of pipes and valves. A Boeing 777 or Airbus A380 might have three or four such systems running in parallel, all doing their jobs simultaneously. If one fails, the others remain untouched and functional. This redundancy is not backup in the sense of a spare tire; it is active, working protection built into the basic architecture of the plane.
How System Separation Works
Each independent hydraulic system starts with its own engine driven pump. That pump draws fluid from a dedicated tank and pressurizes it to roughly 3,000 pounds per square inch. From there, the pressurized fluid flows through copper tubing and manifold blocks to actuators, which are hydraulic cylinders that convert pressure into motion. An actuator for an aileron might extend to push the surface up, or retract to pull it down. All of this happens within one closed system. The second hydraulic system has its own pump, its own tank, its own tubing, and its own actuators controlling different flight surfaces. The third system controls wheel brakes using the same principle. Because they are physically separated, a leak in one system does not affect the others. A fire in an engine nacelle might destroy one pump, but the remaining pumps still operate.
The Electric Backup
Early hydraulic systems relied entirely on engine driven pumps. If an engine failed, the pump on that engine stopped working too. Modern aircraft added electric pumps to each hydraulic system. These electric pumps draw power from the aircraft batteries or electrical generators and kick in automatically if engine pump pressure drops. The result is extraordinary redundancy: each hydraulic system has two independent power sources. On a four engine aircraft with four hydraulic systems, that represents eight separate pumps across the fleet. Even in a worst case scenario where multiple engines fail, electric pumps continue supplying pressure to flight controls and landing gear.
Monitoring and Pilot Control
The flight deck includes dedicated gauges for each hydraulic system, showing pressure in real time. Pilots can see instantly if a system is failing. Modern aircraft also automate system monitoring: if one hydraulic system loses pressure, warning lights alert the crew and the plane's computers may automatically switch control surface commands to the remaining healthy systems. The pilot follows specific checklist procedures for flying with degraded hydraulics. The plane can fly and land safely on two hydraulic systems, or even one in many cases, because control surfaces are wired to accept commands from multiple systems simultaneously. Losing one system means losing some redundancy, but not losing the ability to fly.
Why Separation Matters for Safety
The distributed architecture of multiple independent hydraulic systems represents a philosophical shift in aircraft design: assume that something will fail, and design the plane so that failure does not become catastrophic. By separating hydraulic systems by function and location, engineers ensure that no single event can destroy all control authority simultaneously. A fire, a collision, a leak, a pump failure, or a ruptured line will damage only one system and leave others intact. This "defense in depth" approach, borrowed from military strategy, has become the standard in commercial aviation. It is why the loss of a single hydraulic system today is a serious malfunction but a manageable one, not an emergency. Understanding this architecture helps explain why modern aircraft are statistically the safest transportation ever built.
More videos by Aviation Explained →
Watch on Yesodi → Join Yesodi →