What Happens If an Engine Fails?

Engine Redundancy: Built-in Safety

Every commercial aircraft is certificated to fly safely with one engine inoperative. This is not a theoretical possibility — it is a core airworthiness requirement. For twin-engine aircraft, the FAA's regulations (14 CFR Part 25) require that the aircraft demonstrate controllability with the critical engine (the one whose failure has the worst controllability effect) failed at speeds as low as 1.2 times the stall speed in the takeoff configuration.

The design margins are generous. A Boeing 737-800 with one engine failed on takeoff will still climb at over 2% gradient — slow, but adequate to clear obstacles and return to land safely. Wide-body aircraft like the Boeing 777 have such powerful engines that single-engine performance at high altitude is typically better than many older twin-engine types at full power.

ETOPS Certification

ETOPS (Extended-range Twin-engine Operational Performance Standards) allows twin-engine aircraft to fly routes that take them more than 60 minutes of single-engine flying time from a diversion airport. Without ETOPS, twin-engine jets could not fly trans-oceanic routes.

ETOPS ratings are awarded to specific aircraft-engine combinations after demonstrated in-service reliability. The Boeing 787 and Airbus A350 both hold ETOPS-330 ratings, meaning they can fly routes up to 330 minutes single-engine flying time from any diversion airport. The fundamental premise is that a single engine is so reliable that the risk of both engines failing simultaneously is orders of magnitude lower than the risk of collision or other accident types.

Pilot Training for Engine Failures

Engine failure procedures are among the most practiced drills in commercial aviation. Airline pilots train for engine failures in the simulator every six months, covering:

• Engine failure below V1 (decision speed) on the takeoff roll — requiring immediate rejected takeoff
• Engine failure at V1 — requiring continuation of the takeoff on remaining engine(s)
• Engine failure at cruise altitude — drift-down to single-engine cruise altitude, diversion routing
• Engine fire procedures — using the Engine Fire / Severe Damage / Separation checklist
• Single-engine approach and landing

Simulator fidelity is now so high that pilots can practice scenarios that would be too dangerous to attempt in real aircraft. Modern full-flight simulators are qualified to Level D, the highest standard, providing essentially identical handling cues to the real aircraft.

Historical Cases Demonstrating Safety

United Airlines Flight 232 (1989) suffered an uncontained engine failure that severed all three hydraulic systems — an event considered effectively unsurvivable by design engineers. Captain Al Haynes and his crew improvised control using differential thrust alone, crash-landing at Sioux City with 185 of 296 people surviving. The accident directly led to improved hydraulic system design in subsequent aircraft.

US Airways Flight 1549 (2009) — the "Miracle on the Hudson" — lost both engines to a bird strike at 2,818 feet. Captain Sully Sullenberger ditched in the Hudson River with no fatalities. The event demonstrated both the effectiveness of crew training and the survivability of modern aircraft structures in water impacts.

Air Transat Flight 236 (2001) glided a fuel-exhausted Airbus A330 for 19 minutes over the Atlantic before landing safely at Lajes Air Base, Azores. All 306 passengers survived.

Design Requirements

Engines are required to contain failures. The containment ring around each engine is a heavy titanium ring designed to catch any turbine blade fragments if a blade fails at operating speed. Engine manufacturers must demonstrate "uncontained" failure rates below 1 per 10 million flight hours.

Fire suppression systems in each engine nacelle use Halon or HFC-125 extinguishant directed at engine fire zones. Firewall bulkheads isolate the engine from the aircraft structure. Fuel shut-off valves allow crews to cut fuel flow to a burning engine within seconds.

Your Role as a Passenger

The most important action passengers can take during any abnormal event — including an engine failure — is to remain seated with seatbelts fastened and follow crew instructions. The loud bang, sudden vibration, or yaw associated with an engine failure is alarming but rarely dangerous. Crews are trained to assess the situation and communicate with passengers; premature panic interferes with crew workload. In the extremely unlikely event of an evacuation, leave all carry-on baggage — it is the single most significant factor delaying evacuations.