Why Two-Pilot Cockpit Rules Vary Around the World

A routine break changes staffing

Commercial services generally begin with at least two pilots on the flight deck. During a long journey, however, one may need a bathroom visit or simply a chance to stretch. That ordinary break creates a brief staffing decision with very different answers depending on the airline and jurisdiction.

Under the U.S. approach, a second person remains inside throughout the absence. When a flight carries only two pilots, a flight attendant takes the departing pilot’s place until that pilot comes back. Elsewhere, carriers commonly operate without this requirement, allowing the remaining pilot to occupy the secured flight deck alone for a short period. The contrast is therefore not about the normal number of qualified pilots assigned to a commercial flight. It concerns who is behind the locked door during a temporary absence.

The door solves one risk

Modern entry procedures provide a way to reach a pilot who has become incapacitated. Someone outside can enter a code, beginning a short interval in which the person inside may reject the request. Without a rejection during that window, the system unlocks the door. That process is intended to address a medical emergency or another situation in which the lone pilot cannot respond.

A deliberate refusal presents a different problem. A pilot who remains capable of operating the controls can deny entry and keep the other pilot outside. In that scenario, the security system works as designed while also giving the person inside exclusive access to the aircraft. Keeping two people present does not depend on the locked-out pilot overcoming the door system. Instead, it places another person in the room before an intentional attempt to isolate the flight deck can begin.

Germanwings changed the debate

After the Germanwings crash, the European Aviation Safety Agency issued guidance calling for at least two people to remain on the flight deck whenever that was practical. The purpose was to lower the possibility that one pilot could deliberately exclude the other. It was a recommendation rather than a universal rule comparable to the U.S. requirement.

A little more than a year afterward, EASA revised its position. Airlines were advised to examine their own exposure and decide whether the extra-person procedure belonged in their operations. Lufthansa Group, which included Germanwings, later reversed the policy it had adopted. The sequence left airlines with discretion and preserved the international variation: some maintain continuous dual occupancy, while many permit a pilot to remain alone during a colleague’s break.

A recent attack sharpened concern

Events aboard a flydubai Boeing 737 offered a direct example of why another pilot’s presence can matter. The first officer attacked the captain while both were inside. Despite the assault, the captain managed to open the flight-deck door, allowing other people to enter and intervene. The outcome depended on the captain retaining enough ability to provide access after the attack began.

flydubai did not have a standing policy requiring two occupants throughout the flight. In this instance, both pilots happened to be present when the violence occurred. Had the first officer instead been alone after excluding the captain, the cockpit’s access controls could have prevented immediate intervention rather than enabling it.

Why the distinction matters

The case for continuous dual occupancy is tied less to everyday flying than to a rare but potentially catastrophic combination: one person alone, control of the aircraft and the ability to refuse access. Aviation has reduced many former sources of fatal accidents, making intentional conduct and pilot mental health a more prominent part of the remaining safety discussion.

The policy asks a flight attendant to cover the brief period when one of two pilots steps away. Its safety value comes from preventing sole occupancy during that interval, not from turning the additional person into a pilot. The unsettled global picture reflects two competing models: one establishes the precaution as a fixed operating rule, while the other allows individual carriers to judge the risk themselves.