Your plane is controlled by invisible liquid power flowing through hidden pipes. Hydraulic fluid under pressure moves the landing gear, flaps, rudder, and brakes. One engine driven pump creates pressure in one closed loop circuit. If that single pump breaks, every control surface becomes a dead weight. Modern aircraft use at least two completely separate hydraulic systems. System A might power the left aileron, landing gear, and nose wheel steering. System B powers the right aileron, flaps, and most of the brakes. The two systems use completely separate pipes, valves, and fluid reservoirs. If System A ruptures or fails completely, System B keeps you in the air. Large aircraft like the Boeing 777 use three independent hydraulic systems for extra safety. System C might use an electric pump powered by the aircraft batteries. On some aircraft, the pilot can manually crank a pump handle to lower gear if all else fails. Multiple independent hydraulic systems guarantee flight controls stay responsive even after failures. Understanding redundancy is the core principle that keeps modern aircraft safe.
WHY AIRCRAFT NEED MULTIPLE INDEPENDENT HYDRAULIC SYSTEMS
Hydraulic systems are the muscle behind modern flight. They power every major control surface and landing function on an aircraft, converting the invisible pressure of fluid into the physical force that moves your plane. But unlike muscles in an animal body, aircraft hydraulics must never fail. That's why engineers built redundancy into aircraft hydraulic architecture decades ago, creating multiple completely independent pathways to control each essential function. Learning how and why this redundancy exists opens a window into how aviation stays safe even when something breaks.
How hydraulic systems work
Hydraulic power relies on a simple principle: liquids cannot be compressed, but they can transmit force over distance through pipes. A pump driven by an aircraft engine forces hydraulic fluid under tremendous pressure into a closed system of tubes and valves. That pressurized fluid flows to actuators, which are cylinders with pistons inside. When fluid enters one side of an actuator, the piston moves, creating mechanical motion. Flight control surfaces like ailerons, elevators, and rudders are heavy and require more force than a pilot's arm could provide. Hydraulic actuators deliver that force instantly and smoothly. The fluid returns to a reservoir, where the pump pressurizes it again. This cycle repeats thousands of times per flight, all driven by engine power and controlled by pilot input.
The problem with single systems
Early aircraft used single hydraulic systems. One pump, one set of pipes, one reservoir. An air transport that crashed in the 1950s revealed a deadly vulnerability. A small leak in the hydraulic system led to complete loss of all control surfaces. The pilots had no way to steer, pitch, or slow the aircraft. Investigations showed that a single point of failure in the fluid circuit created an unacceptable risk. Engineers realized that the entire flight-critical infrastructure hung on one fragile thread. If corrosion ate through a pipe, or if metal shavings from engine wear clogged a valve, or if a fitting cracked, the pilots would lose control of the airplane. A redundant system was not a luxury. It was essential.
Design through separation
Modern aircraft achieve hydraulancy reliability through complete separation. System A and System B (and System C on larger planes) share almost nothing. They use different pumps, different reservoirs, different pipes routed along different pathways through the aircraft. A valve controlled by System A cannot accidentally block System B's fluid flow. If a fire in the left wing burns through System A's hydraulic line, System B's pipes are routed far away on the right side of the fuselage or through protected channels. Fluid from System A and System B is often physically separated by hundreds of feet of aircraft structure. A single failure, rupture, or malfunction that disables one system leaves the other entirely functional. Each system is powerful enough to control enough critical surfaces to maintain safe flight and landing.
Distribution of control surfaces
On a large commercial aircraft, the three independent hydraulic systems divide responsibilities carefully. One system typically operates the left side flight controls and part of the landing gear mechanism. Another system handles the right side flight controls and brakes. A third system powers backup functions or serves as a tiebreaker when both primary systems must work together for a critical maneuver. This distribution means no single control surface depends solely on one pump. The landing gear, for example, might be powered by System A but can be lowered by System B if needed. Flaps might operate on System B but have a crossover valve that allows System A to help if the demand is extreme. This overlapping responsibility ensures that a pilot can always land safely even if one entire system fails completely mid-flight.
Mechanical backup systems
Redundancy goes deeper than just multiple hydraulic systems. Many aircraft include purely mechanical backup controls. A pilot can move an elevator cable by hand. A rudder pedal can pull a cable directly in an emergency. The landing gear has a manual crank that a crew member can turn to lower the wheels if all three hydraulic systems fail, which is extraordinarily rare. These mechanical systems require significant physical effort and work only after hydraulic systems are exhausted, but they exist as a final safety net. Some older aircraft and some high performance military jets rely more heavily on these mechanical paths. Modern transport aircraft rarely need them, but they remain as a testament to how aviation prioritizes control above all else.
Why this matters to you as a passenger
Understanding hydraulic redundancy reveals something fundamental about modern aircraft design. Engineers assume things will fail. They don't design for perfection. They design for failure with grace. When a system that powers invisible controls inside the walls of your aircraft breaks, other systems continue working seamlessly. You never notice. The aircraft remains safe and controllable. This philosophy of redundancy, separation, and backup is woven throughout every aircraft. Multiple electrical systems. Multiple communication radios. Multiple pitot tubes that measure airspeed. Multiple generators. The combination of these overlapping, independent safety layers is why aviation has become the safest form of transportation ever created, measured per mile traveled. Your safety in the air rests partly on hydraulic technology that is decades old and partly on the engineering wisdom that came from learning hard lessons about what happens when there is no backup.
More videos by Aviation Explained →
Watch on Yesodi → Join Yesodi →