On 31 May 2014, a Gulfstream IV accelerated down runway 11 at Bedford, Massachusetts, and never left the ground. The gust lock, a mechanical pin that clamps the flight controls while the jet is parked, was still engaged. The jet overran the runway, crossed a ravine and burned. All seven people on board died.
The two pilots were experienced, and their checklist had an item that would have caught the lock. When the NTSB pulled the jet's flight data, it found something worse than one bad day: before 98% of their previous 175 takeoffs, this crew had not done a complete flight control check. They hadn't forgotten their checklist once. They had stopped doing it years earlier.
Seventy-nine years before Bedford, another airplane took off with its controls locked. That crash is the reason checklists exist at all. This article is about everything in between: how pilots actually use checklists today, from a student's laminated card in a 1976 Cessna 172M to the self-ticking electronic checklist of a Boeing 787. We'll cover read-do vs do-verify, the shortened cards flight schools hand out vs the POH, what belongs in memory and what never should, what airline captains on the Boeing 737, Airbus A320, Embraer E-Jets and ATR 72-600 really look at, what the FAA and EASA actually require, and what to do when the radio and the transponder die together. It's all backed by accident reports, NASA research and the rules themselves.
Key takeaways
- Checklists were born from a crash. The Boeing Model 299, prototype of the B-17, crashed at Wright Field on 30 October 1935 with its elevator locked. Checklists followed, and 12,730 B-17s were built after it.
- There are three ways to run one. Do-verify (do the flow from memory, then confirm with the list) for normal procedures; read-do (read a line, do it) for abnormal and emergency procedures; and challenge-response, where one pilot reads and the other answers. The FAA has said it won't accept do-verify for non-normal procedures without substantial evidence.
- Checklists fail quietly. NASA observers counted an average of 3.2 checklist deviations per airline flight, and crews caught only 14% of them. "Responding without looking" was one of the two most common slips.
- Memory items should be few. FAA guidance says avoid them, and if you must have them, use fewer than three, with no conditional steps. The UK CAA says ideally under four and never more than six.
- Shortened checklist cards are legal but subordinate. In the US no FAA approval is needed to customize a Part 91 checklist, but the AFM/POH always takes precedence. EASA's guidance for private pilots says to use the manufacturer's latest checklists.
- Europe makes it the law. Under EASA's Part-NCO, the pilot in command of even a private Cessna is legally responsible for "ensuring that all operational procedures and checklists are complied with." No equivalent rule binds a US private pilot in a light single, though every FAA checkride tests checklist use.
- Airliners are split. Boeing's 777, 787 and 747-8 run electronic checklists that sense switch positions. The 737 still flies with paper. Airbus uses ECAM for failures, with fully electronic normal checklists on the A220, A350 and A380. Embraer and ATR mix EICAS alerts, paper and tablets.
- Squawk 7600 assumes a transponder with power. An electrical failure can kill the radio and the transponder together. Then the lost-comms checklist has nothing left to squawk, and a phone call to ATC may be the only way to talk to anyone.
- Glass is coming to light aircraft. Cirrus's 2024 G7 SR-series links checklists to its crew alerting system, and Garmin's G1000 NXi loads custom checklists from an SD card. Most of the world's trainers still fly with paper.
The 1935 crash that invented the checklist
In 1935 the US Army Air Corps held a fly-off for a new long-range bomber. Boeing's entry, the four-engine Model 299, was the clear favourite: faster, bigger and longer-legged than anything else in the competition.
On 30 October 1935, at Wright Field in Dayton, Ohio, Major Ployer P. Hill lined it up for an evaluation flight with Boeing's chief test pilot Leslie Tower on board. The bomber climbed to about 200 feet, pitched up, stalled and crashed. Hill and Tower died of their injuries. The board found the direct cause was that the elevator control had been left locked.
The Model 299 was simply more airplane than one person could reliably remember. It had four engines with mixture and propeller controls, cowl flaps, retractable gear, flaps, trim tabs and control locks. Douglas won the production contract. But the Air Corps still bought 13 test aircraft from Boeing, and it did something new: it wrote down the steps the crew had to verify before takeoff, before landing and at engine start, and made crews read them.
The Model 299 became the B-17 Flying Fortress, and 12,730 more were built. You may have read that B-17 crews then flew 1.8 million miles without an accident. The story is popular and appealing, but we couldn't find a primary record behind it, so treat it as legend.
Two gust locks, 79 years apart. The first one gave us the checklist. The second one proved that having a checklist isn't the same as using it.
The idea spread far beyond aviation. In 2009 the World Health Organization's surgical safety checklist, explicitly modelled on cockpit practice, was tested in eight hospitals. Deaths fell from 1.5% to 0.8%, and inpatient complications from 11% to 7%. Surgeon Atul Gawande's book The Checklist Manifesto popularised the lessons he took from Boeing's checklist designers.
Read-do, do-verify, challenge-response: the three ways to run a checklist
Most pilots learn "use the checklist" as if there were one way to do it. There are at least three, and mixing them up is one of the most common errors airline observers record.
| Method | How it works | Best for | Main risk |
|---|---|---|---|
| Do-verify (do-confirm) | Configure the airplane from memory using a "flow" (a fixed path around the panel), then read the checklist to confirm the critical items | Normal procedures: before start, before takeoff, before landing | Saying "checked" without looking, because you already "know" you did it |
| Read-do | Read one line, do it, then read the next | Abnormal and emergency procedures, rare tasks | Losing your place after an interruption; slower |
| Challenge-response | One pilot reads the item (challenge), the other checks and answers with the actual state (response) | Multi-crew airliners; can be combined with either of the above | Both pilots trusting each other instead of the switch |
| Memory items (immediate actions) | A handful of actions done from memory, then confirmed against the checklist once time allows | Engine failure after takeoff, fire, rejected takeoff | Too many items, wrong sequence under stress |
| Flow + mnemonic (GUMPS, CIGAR) | A memory aid that triggers the flow | Single-pilot GA, as a backup to the written list | Mnemonics skip items your airplane needs |
The FAA's Airplane Flying Handbook puts it plainly for light aircraft: a checklist is "a memory aid," and checklists "need not be 'do lists'": a pilot can act first, then verify, with the emphasis on the check in checklist.
Airline practice is stricter. An FAA human factors study published in January 1995 noted that operators have traditionally preferred do-verify for normal checklists. It also said the FAA would not approve or accept do-verify for non-normal procedures without substantial evidence. Airbus's own standard operating procedures put it bluntly: normal checklists are not read-and-do lists. The pilot flying completes the flow, then calls for the checklist, and the pilot monitoring reads it.
Here's what that looks like in a light airplane. On the left, a short normal checklist that a student should do from a flow and then confirm. On the right, an emergency checklist to read and do, with its one memory item highlighted:
After landing and clearing runway
- VR
- 55
- CLB
- 70
- GLIDE
- 65
- VFE 30°
- 85
- 01Wing FlapsUP
- 02Carburetor HeatCOLD
- 03TransponderGND
- 04TrimSET for takeoff
Engine failure immediately after takeoff
- VR
- 55
- VX
- 62
- VY
- 74
- GLIDE
- 68
- 01Airspeed70 KIAS (memory item)flaps UP; 65 KIAS flaps DOWN
- 02MixtureIDLE CUT OFF
- 03Fuel Shutoff ValveOFFpull full out
- 04Ignition SwitchOFF
- 05Wing FlapsAS REQUIRED
- 06Master SwitchOFF
- 07Cabin DoorUNLATCH
- 08LandSTRAIGHT AHEAD
Boeing's checklist designer Daniel Boorman, whose advice Gawande quotes at length, adds a few rules of thumb: a good checklist is short, covering only the critical steps an expert might miss. It is not a how-to manual. It has a clear pause point where it should be run, and usually somewhere between five and nine items. NASA researchers Asaf Degani and Earl Wiener went further in their landmark 1990 study of airline checklists, Human Factors of Flight-Deck Checklists. They found one airline checklist with 76 items for a single task and called that "somewhat absurd."
Checklist hygiene: the slips that kill
Here's the uncomfortable truth: having a checklist doesn't protect you. Running it properly does, and pilots, including very good ones, are bad at that.
In 2010, NASA researchers Key Dismukes and Ben Berman published the results of watching 60 ordinary airline flights from the jumpseat at three carriers. They logged 899 deviations from procedure. 194 involved checklists: an average of 3.2 checklist slips per flight. Only 14% of the checklist deviations were caught and corrected. The two most common types made up nearly half of the total:
1. Flow-check performed as read-do (48 cases): the crew skipped the flow and just read the list, losing the double check the method is designed for. 2. Responding without looking (43 cases): answering a challenge from habit. In one example a captain answered "On" to "APU bleed" while the bleed was off.
The others were items omitted or done incompletely, poor timing, checklists done from memory, and checklists never started at all.
On an average airline flight, NASA observers counted 3.2 checklist slips. Crews caught about one in seven.
The accident record shows what those slips cost. Look how often the killer is a single word, said without looking:
| Year | Flight | Aircraft | Killed | What the checklist missed |
|---|---|---|---|---|
| 1987 | Northwest 255, Detroit | MD-82 | 156 (incl. 2 on the ground) | NTSB: failure to use the taxi checklist; flaps and slats not extended, and the takeoff warning had no power |
| 1988 | Delta 1141, Dallas | Boeing 727 | 14 | Flaps not set. To "Flaps" the first officer answered "fifteen, fifteen, green light." Long off-duty chat during taxi |
| 2005 | Helios 522, Greece | Boeing 737-300 | 121 | Pressurization mode selector left in MAN after maintenance, missed on three checklists. The response "set" was given after checking only altitudes |
| 2008 | Spanair 5022, Madrid | MD-82 | 154 | Flaps and slats not selected. The After Start checklist was interrupted at the flaps item, and the warning system didn't sound |
| 2014 | N121JM, Bedford | Gulfstream IV | 7 | Gust lock engaged. Complete flight control checks skipped before 98% of the previous 175 takeoffs |
| 2015 | TransAsia 235, Taipei | ATR 72-600 | 43 | Pilot flying shut down the wrong, working engine instead of following the documented identification procedure |
In general aviation the pattern repeats on a smaller scale. An NTSB safety alert counted more than 50 fuel management accidents a year from 2011 to 2015. 95% of them were blamed on the pilot rather than the fuel system. In one example, a Beech 19A's fuel selector had been left OFF after an annual inspection, and the pilot "did not use a checklist." AOPA calls gear-up landings and gear collapses general aviation's most costly problem, at about $70,000 per incident.
The most dangerous word in aviation might be "checked."
Ten rules of checklist hygiene
These are distilled from FAA Advisory Circular 120-71B, ICAO's design guidance (Doc 8168 Volume III), EASA's guidance for private pilots, the UK CAA's CAP 676 and the NASA research above:
- Look, touch, then speak. Find the switch, put a finger on it, and only then answer. The FAA's Pilot's Handbook of Aeronautical Knowledge notes that many solo pilots read the checklist out loud and touch critical controls.
- Answer with the actual state, not "checked." "Flaps: ten, ten, green" beats "Flaps: set." ICAO's design guidance tells operators to avoid responses like "set," "checked" or "completed."
- Use the method the list was designed for. Flow first, then verify, for normal lists. Read and do, line by line, for abnormals.
- If you're interrupted, go back. The FAA's advice is "If interrupted, restart from the beginning." EASA's guidance for private pilots says to restart interrupted pre-takeoff checks "from a safe point prior to the interruption."
- Run it at the right place. Finish taxi and before-takeoff items well before the runway. ICAO says not to do the takeoff checklist on the active runway.
- Keep the flight deck sterile. Delta 1141's long off-duty conversation during taxi was cited in the NTSB's findings.
- Close the loop out loud. End with "Before takeoff checklist complete" so the next one isn't started on top of a half-done one.
- Never let "I always do it" replace the list. Habit is exactly what the Bedford crew had.
- Use the checklist for the airplane in front of you. Not the one you trained in, and not one from a different model year (more on that below).
- One checklist at a time. If you have to stop, mark your place, or use a tool that marks it for you.
POH checklists vs the card in your flight bag
Every light airplane's Pilot's Operating Handbook follows the same basic layout, set by the General Aviation Manufacturers Association's Specification No. 1. Section 3 has the emergency procedures and Section 4 the normal procedures. Each starts with a checklist and then gives "amplified procedures": the same steps with explanations, cautions and the reasons behind them.
Almost nobody flies with the POH open on their lap. Pilots fly with a checklist card: a laminated sheet, a spiral flip book, or a list on a tablet. Very often it isn't the manufacturer's at all. It's a version the flight school or club wrote: shorter, reordered and adapted to local procedures.
Here's a real one: the before-takeoff list from an Israeli flight school's Cessna 172P checklist booklet, which ZuluCheck transcribed. Compare it with the 1982 Cessna 172P POH: the school added three lines the POH doesn't have, highlighted below. It also moved the seat belt and fuel quantity checks elsewhere and changed strobes to "exterior lights."
Before takeoff
- VR
- 55
- CLB
- 70
- GLIDE
- 65
- VFE 30°
- 85
- 01Parking BrakeSET
- 02Windows and DoorsCLOSED and LOCKED
- 03Flight ControlsCHECKfor freedom of movement and correct direction
- 04Fuel Selector ValveBOTH
- 05MixtureRICHbelow 3,000 ft
- 06Elevator TrimSET for takeoff
- 07Throttle1700 RPM
- 08MagnetosCHECKRPM drop should not exceed 125 RPM on either magneto or 50 RPM differential between magnetos
- 09Carburetor HeatCHECKfor RPM drop, return to COLD
- 10Engine Instruments and AmmeterCHECK
- 11Suction GageCHECK
- 12ThrottleIDLE
- 13Throttle1,000 RPM
- 14RadiosON
- 15TransponderALT 5100 (added by the flight school)the local VFR code
- 16Exterior LightsAS REQUIRED
- 17Gyro InstrumentsSET
- 18Throttle Friction LockADJUST
- 19Takeoff BriefingCOMPLETE (added by the flight school)
- 20RadioREQUEST DEPARTURE CLEARANCE (added by the flight school)
- 21BrakesRELEASE
That's checklist customization done right: a takeoff briefing, the local transponder code and the clearance call are exactly what a student forgets. But customization has a dark side, and regulators know it.
| Item | POH / AFM checklist | School or club card | Commercial off-the-shelf card |
|---|---|---|---|
| Who writes it | The manufacturer, as part of the approved flight manual | The flight school, club or owner | A publisher, for a model family |
| Approval | FAA- or EASA-approved as part of the AFM | None needed in the US for Part 91 (FAASTeam, 2024); must not contradict the POH | None; the FAA warns you to compare it with the manufacturer's |
| Strengths | Authoritative, complete, matches the specific model year | Short, local procedures, fits the school's syllabus | Cheap, durable, easy to find |
| Weaknesses | Long; amplified text is unusable in flight | Can drift from the POH; inherits errors when copied | Can omit items for your exact model |
| Regulators say | "The AFM/POH always takes precedence" (FAA Airplane Flying Handbook) | EASA's guidance for private pilots: use the manufacturer's latest checklists | FAA SAFO 17006: "meticulously compare them to the manufacturer's checklist" |
That FAA warning, Safety Alert for Operators 17006 from April 2017, wasn't theoretical. It followed a gear-collapse accident in which an off-the-shelf checklist left out the steps for manually extending the landing gear.
The FAA Safety Team's January 2024 notice "A Check-up on Checklist Customization" sums up the US position. There is "no approval required from the FAA to modify or customize a checklist" for Part 91. But examiners may require the manufacturer's procedure on a checkride, and instructors should teach the items a custom list leaves out. As we showed in our Cessna 172M, N, P, R and S comparison, a "172 checklist" written for one model year can be dangerously wrong for another: carbureted vs fuel-injected starts, different flap limits, different glide speeds.
Memory vs reading: what belongs in your head
If checklists are so good, why memorize anything? Because some emergencies don't give you time to find a page. An engine failure at 300 feet after takeoff gives you seconds. The answer every regulator gives is the same: memorize as little as possible, and verify it against the checklist afterwards.
- FAA, AC 120-71B (2017): "Memory items should be avoided whenever possible." If used, they should be "less than three items" with no conditional decision steps.
- UK CAA, CAP 676 (2006): memory items go first on the checklist, boxed or shaded, "preferably fewer than four and certainly no more than six" for multi-crew operations. Single-pilot operations may need more.
- FAA Pilot's Handbook of Aeronautical Knowledge: memorize the immediate action items and, after completing them, refer to the appropriate checklist.
- FAA Private Pilot ACS: where reading a checklist would be unsafe, the examiner evaluates the memory items, then the checklist review "once conditions permit."
Now look at what happens in the real world. After the two Boeing 737 MAX accidents, the FAA's 2020 airworthiness directive rewrote the runaway stabilizer and unreliable airspeed procedures. Airline groups asked the FAA to simplify the recall items. The FAA refused, reasoning that merging steps "would increase the likelihood that a critical flightcrew action is forgotten." Southwest's pilots' union described the result as eight memory steps including three conditional ones. Compare that with the FAA's own advice: fewer than three, with no conditions. Some US airlines responded by moving the procedure onto a laminated Quick Reference Card.
Then there's the problem of how long a written checklist is. On 15 January 2009, US Airways 1549, an Airbus A320, hit a flock of geese at 2,818 feet above the ground and lost both engines. The crew had about three and a half minutes before they landed on the Hudson. Their Engine Dual Failure checklist had been designed for failures above 20,000 feet. It was three parts on three pages. According to the NTSB, the crew got as far as the middle of part one and "never reached the ditching portion." Everyone survived anyway. The NTSB called the checklist unduly long for such an event and recommended low-altitude dual-engine-failure checklists.
Sully's crew ran out of altitude long before they ran out of checklist.
There's also startle to account for. A 2017 study by TNO and TU Delft put 20 airline pilots through stall recoveries. When the stall came as a surprise, they followed the recovery procedure significantly worse than when they expected it. EASA now requires startle and surprise training for airline pilots. The lesson for everyone else: a memory item you've never rehearsed under pressure isn't really a memory item.
For a light airplane, a sensible split looks like the POH's own engine failure checklist for a Cessna 172S. The first five lines are short, fixed and in the same order every time, so they're the ones worth committing to memory, highlighted here. The rest you read:
Engine failure during flight (restart)
- VR
- 55
- VX
- 62
- VY
- 74
- GLIDE
- 68
- 01Airspeed68 KIAS (memory item)best glide
- 02Fuel Shutoff ValveON (memory item)push full in
- 03Fuel Selector ValveBOTH (memory item)
- 04Auxiliary Fuel Pump SwitchON (memory item)
- 05MixtureRICH (memory item)if restart has not occurred
- 06Ignition SwitchBOTHor START if propeller is stopped
- 07Auxiliary Fuel Pump SwitchOFF
- If the fuel flow immediately drops to zero, return the Auxiliary Fuel Pump Switch to ON.
Memory aids such as GUMPS (gas, undercarriage, mixture, propeller, switches) before landing, or "airspeed, best field, checklist" after an engine failure, are useful flows. But they're backups to the written list, not replacements. A mnemonic doesn't know that your airplane has carb heat, or a fuel shutoff valve.
Paper vs glass in light airplanes
Walk down any flight line and you'll see three generations of checklist side by side.
The steam-gauge trainer. A 1970s Cessna 172M or Piper Warrior has nothing but the POH and whatever card the owner put in the side pocket. The checklist lives on paper, a kneeboard or a phone. It's simple and reliable. But paper has a known flaw that Degani and Wiener pointed out back in 1990: it gives you no mark of where you were interrupted, and it doesn't show which items you've done.
The glass trainer. Garmin's G1000 NXi can display checklists on the multifunction display. They're written with Garmin's Checklist Editor and loaded from an SD card. That's powerful, and Garmin attaches a pointed warning: "Do not use an unapproved checklist during flight operations." In many G1000 airplanes the electronic checklist is something the owner sets up, not something the manufacturer certifies.
The 2024 Cirrus. When Cirrus unveiled the SR-series G7 in January 2024, its Perspective Touch+ flight deck added touchscreen controllers and CAS-linked checklists: when the crew alerting system raises a caution, the avionics suggest the matching checklist, which the pilot can open or dismiss. There's a dedicated checklist scroll wheel too. Cirrus has since brought "alerts-linked checklists" to its Vision Jet. This is the airliner idea of an electronic checklist that knows what's wrong, arriving in a four-seat piston single.
Here's what that looks like in practice. Below is the before-landing checklist from the Cessna 172S G1000 POH, drawn the way a glass-cockpit display shows it. Tap CHECK to tick the item in the cyan box and move to the next, just as a pilot does with a touchscreen key or the ENT button on the panel:
Normal proceduresBefore landing
- Pilot and Passenger Seat BacksMOST UPRIGHT POSITION
- Seats and Seat BeltsSECURED and LOCKED
- FUEL SELECTOR ValveBOTH
- Mixture ControlRICH
- LANDING and TAXI Light SwitchesON
- Autopilot (if installed)OFF
- CABIN PWR 12V Switch (if installed)OFF
CHECKLIST FINISHEDGo to next checklist?
Notice what the screen does that a laminated card can't. It shows exactly where you are and what's done, and it doesn't say "finished" until every line is green. If ATC calls halfway through, the cyan box is still waiting on the item you were on when you come back. On a Boeing 787 the sensed items turn green by themselves. In a light airplane, the pilot still confirms every line.
| Item | Paper card / POH | Panel electronic checklist (G1000 NXi, Cirrus G7) | Phone or tablet app |
|---|---|---|---|
| Cost | Almost free | Comes with the avionics | Free to low cost |
| Works if the power fails | Yes | No; carry paper backup | Yes, on battery |
| Marks your place, shows what's done | No | Yes | Yes |
| Linked to warnings | No | Cirrus G7: suggests checklist from CAS alert | No |
| Easy to customize and share | Retype and reprint | SD card and editor software | Yes, in the app |
| Languages | Usually English only | Usually English only | Can be many |
| Readable at night, in turbulence | Depends on font and lighting | Good | Good, with large type and night themes |
The best electronic checklists don't just list the switches. They look at them.
Whatever you use, carry a backup. EASA's guidance for private pilots says that when an electronic flight bag displays aircraft checklists, the pilot should check before flight that an appropriate backup is available. In the US, Advisory Circular 91-78A covers electronic flight bags, including checklists, for Part 91 pilots.
What airline pilots actually use: Boeing, Airbus, Embraer and ATR
So what does an airline transport pilot actually look at? It depends almost entirely on which airplane they fly. And the answer isn't always "a screen."
| Aircraft | Normal checklists | Abnormal / emergency | Notes |
|---|---|---|---|
| Boeing 737 NG / MAX | Printed card | Paper QRH (Boeing also offers an iPad version) | No EICAS crew-alerting system; some airlines put urgent items on a Quick Reference Card |
| Boeing 777, 787, 747-8 | Electronic checklist (ECL) on a centre display | ECL, linked to EICAS alert messages | Sensed items tick themselves; paper backup carried |
| Airbus A320 family, A330 | Printed card, read challenge-response; takeoff and landing "memos" on screen | ECAM shows the procedure for each failure | eQRH on tablets offered by Airbus since 2017 |
| Airbus A350, A380 | Electronic normal checklists on the E/WD display | ECAM | The most integrated Airbus flight decks |
| Airbus A220 | Electronic checklist | Electronic, organized by priority | Designed as Bombardier's C Series |
| Embraer E-Jets E1 / E2 | Operator checklist | EICAS alerts plus QRH, paper or Embraer's iPad eQRH | Embraer's eQRH app (2014) is meant to replace the paper QRH |
| ATR 72-600 | Checklist card | Electronic procedures pop up on the EWD; paper QRH | 2017 "Standard 3" avionics added customizable checklists |
| Cirrus SR G7 | Panel checklists and printed checklist | CAS-linked suggested checklists | Introduced January 2024 |
| Cessna 172 (steam gauges) | Card, POH or app | Card, POH or app | No electronics to help |
Boeing: the 737 is the odd one out
Boeing introduced its electronic checklist on the 777 in the mid-1990s, calling it the world's first airline-modifiable electronic checklist. The ECL runs on a centre display. Items Boeing calls "closed-loop" are sensed from switch positions and tick themselves off; "open-loop" items, which the airplane can't sense, are confirmed by the pilot with the cursor. Non-normal checklists are tied to the EICAS alert messages and sorted by priority, so a caution brings up its own procedure. FAA Advisory Circular 120-64 requires a paper version that leads to the same crew actions.
Does it work? Boeing's checklist chief Daniel Boorman reported that in an unpublished Boeing simulator study, crews made 46% fewer errors with the electronic checklist than with paper. He also estimated that a fully integrated electronic checklist could have prevented 19 accidents between 1978 and 2001. Those are Boeing's own figures, and the study was never published, but they fit decades-old human-reliability data: an item with no way to tick it off has an error rate of about 1 in 100, falling to about 3 in 1,000 when you physically check it off.
The 787 works the same way: the ECL senses control positions, non-sensed items are selected with the cursor, and the checklist is reset before every flight. The 747-8 brought "many of the advanced features found on the Boeing 777, such as an electronic checklist" to the jumbo.
The 737, the most-flown Boeing of all, still flies with a printed normal checklist and a paper Quick Reference Handbook, often supplemented by an iPad QRH. It is the only airplane Boeing still sells with no EICAS, which is why a 2020 US law requiring modern crew-alerting systems forced Congress to extend the deadline for the 737 MAX 7 and MAX 10.
Airbus: ECAM tells you what's wrong
Airbus took a different route. Since the A310 and A320 in the 1980s, the ECAM (Electronic Centralised Aircraft Monitor) has displayed the abnormal procedure for each failure on the upper central screen, as a list of actions that clears as they're done. Normal checklists on the A320, A330 and A340 are mostly read from a printed card, with the takeoff and landing "memos" on screen showing items still to do. Airbus's procedure is classic do-verify with challenge-response: the pilot flying completes the flow, calls for the checklist, the pilot monitoring reads it, and ends with "checklist complete."
On the A380 (2007) and A350 (2015), normal checklists also moved onto the screen: the pilot presses a "C/L" button and the engine and warning display shows the normal checklist. Airbus also sells an electronic QRH for tablets on its older families, which it called "the future of flight operations" in 2017.
ECAM's limits were exposed on Qantas 32, an A380 whose number 2 engine burst over Indonesia in November 2010. The crew faced a cascade of ECAM messages. Their captain later described about 100 checklists. The Australian Transport Safety Bureau found it took about 50 minutes just to complete the initial procedures. With five pilots on the flight deck, they landed everyone safely.
Embraer: EICAS and the tablet QRH
Embraer's E-Jets, flown by regional airlines across the US, Europe and beyond, show alerts on an EICAS display, with procedures in a Quick Reference Handbook. Embraer's iPad eQRH, launched in 2014 and now covering both E1 and E2 jets, is described as an interactive checklist meant to replace the paper QRH. In business aviation, Embraer goes further: its Praetor jets are marketed as paper-free flight decks with electronic checklists.
ATR 72-600: the regional workhorse
The ATR 72-600 is one of the most common turboprops at regional airlines from India to Scandinavia. India's IndiGo alone had 48 in mid-2025 and gave its ATR pilots iPad EFBs in 2024. Its Thales glass cockpit uses five large LCDs. ATR says the electronic procedures on the engine and warning display (EWD) "automatically pop-up the procedure needed at the right time." The 2017 Standard 3 avionics, certified by EASA in July 2017, added customizable checklists.
That's why TransAsia 235 is so sobering. On 4 February 2015, an ATR 72-600 had a fault on its right engine shortly after takeoff from Taipei. The display showed the engine flame-out procedure, and the airline's procedure was to read and do the QRH checklist. The monitoring pilot said "wait a second, cross check," but the pilot flying pulled back the throttle of the working left engine. Taiwan's Aviation Safety Council found the crew failed to perform the documented failure identification procedure. 43 of the 58 people on board died. The checklist was on the screen. Nobody read it.
FAA vs EASA vs ICAO: what the rules actually say
Ask ten pilots whether using a checklist is a legal requirement and you'll get ten answers. Here's what the rules actually say.
United States. For large airplanes, turbojet-powered multiengine airplanes and fractional ownership aircraft, 14 CFR 91.503 requires a cockpit checklist at the pilot station, used "by the flight crewmembers when operating the airplane." Airlines are covered by 14 CFR 121.315, which requires an approved cockpit check procedure designed so a crewmember "will not need to rely upon his memory for items to be checked." Part 135 operators must provide checklists, and pilots must use them (14 CFR 135.83). But no rule explicitly requires a Part 91 pilot in a light single to use a checklist. The FAA enforces it differently: the Private Pilot Airman Certification Standards include a dedicated "Use of Checklists" appendix, and nearly every task includes completing the appropriate checklist.
Europe. EASA puts it in the law itself. Under NCO.GEN.105(a)(3) of Part-NCO, the pilot in command of a non-commercial flight, including a private pilot in a Robin or a Cessna, is responsible for "ensuring that all operational procedures and checklists are complied with." The guidance attached to it says the pilot should use the manufacturer's latest checklists and restart interrupted pre-takeoff checks from a safe point. For airlines, ORO.GEN.110(h) requires a checklist for every aircraft type, and says its design and use "shall observe human factors principles." EASA's PPL skill test guidance says checks should be completed "in accordance with the authorised checklist."
ICAO. Annex 6 Part II requires checklists for larger general aviation aeroplanes (over 5,700 kg or turbojet), whose design must observe human factors principles. ICAO's design guidance, now in Doc 8168 Volume III, covers how to write one. Keep items to those critical to safety. Don't repeat a critical item more than twice. Define what to do after an interruption. Avoid "checked" as a response. Use colour coding (green normal, yellow abnormal, red emergency), but never colour alone.
The UK. The CAA's CAP 676 is still the most detailed guide to emergency checklist design. It says text should be readable at 600 mm, in a sans-serif font with 12 pt body text, one drill per page where possible, and memory items first. Its Good Airmanship leaflet is more relaxed for private flying: use the checklist "unless you are very familiar with the aircraft."
| Item | FAA (US) | EASA (EU) |
|---|---|---|
| Private pilot, light single | No explicit rule; follow the AFM limitations (14 CFR 91.9); checklist use tested on every checkride | Legal duty: NCO.GEN.105(a)(3); guidance: manufacturer's latest checklist, restart interrupted checks |
| Large or turbojet airplanes | 14 CFR 91.503: checklist required and must be used | Part-NCC and Part-ORO |
| Airlines | 14 CFR 121.315 (approved, must not rely on memory); 135.83 | ORO.GEN.110(h) (human factors design); CAT.GEN.MPA.105 |
| Customizing checklists | No FAA approval for Part 91; AFM/POH prevails; SAFO 17006 | Private: manufacturer's checklist. Airlines: operator's own, based on the manufacturer's documents |
| Checkride | ACS "Use of Checklists" appendix and task elements | AMC1 FCL.235: "authorised checklist" in all sections |
| Memory items | AC 120-71B: avoid; fewer than three; no conditional steps | No limit set (UK CAP 676: ideally fewer than four, maximum six) |
| Electronic checklists | AC 120-64 (paper backup with same actions); AC 120-76D and 91-78A (EFBs) | Backup required when an EFB shows checklists (AMC2 NCO.GEN.125) |
When the radio dies: why squawking 7600 isn't always enough
Every pilot learns the radio-failure drill early. Squawk 7600. Follow the lost-comms rules (in the US, 14 CFR 91.185 for IFR and 91.129(d) for landing at a towered airport; SERA.14083 in Europe). Watch the tower for light signals. It's on every checklist card, and on a checkride it's the answer that ticks the box.
It also rests on an assumption nobody prints on the card: that your transponder still works.
Code 7600 is a message sent by a box that needs electrical power, on the same bus as the radio it's reporting dead. Lose the alternator and then the battery, or a master relay, and the transponder goes dark along with the radios. So does ADS-B Out. There's nothing left to squawk. To the controller you're at best an unlabeled blip on primary radar, and down low, outside primary coverage, you may not be there at all.
ZuluCheck's founder learned this the hard way, when an electrical failure took out the radio and the transponder at the same time. The checklist answer, squawk 7600, assumed a box that had no power. "That's what's required" is a fine answer in a ground school. In the air, with no way to tell anyone who you are or what you want, it isn't a plan.
When the electrics die, 7600 dies with them. Your phone doesn't.
The rules themselves leave room for more. The FAA's Aeronautical Information Manual (AIM 6-4-1) admits it is "virtually impossible" to write procedures for every radio failure, says pilots are "expected to exercise good judgment," and reminds them of the emergency authority in 14 CFR 91.3(b). AIM 6-4-3 lists ways to get back in touch, from the last frequency to Flight Service and 121.5, and adds: "If the capability exists, do all at the same time."
The capability most pilots carry is in their pocket. A short phone call to the tower, approach or the area control centre turns a silent blip into a conversation. You can say who you are, where you are, what's wrong and what you want. You can get a clearance, an agreed route through the airspace or a green light from the tower, instead of hoping the controller guesses right.
Be clear-eyed about the limits:
- Fly first. Aviate, navigate, communicate. Make the call only when the airplane is stable and you can do it safely, and keep following the published procedure while you do.
- The FAA hasn't caught up. The AIM never mentions phones in flight, and the FCC's 47 CFR 22.925 bars using a cellphone in flight. Europe has: since May 2025, SERA.14083 tells pilots to try "all available means," mobile phones included. Either way, a lost-comms emergency is the case where pilot judgment comes first.
- Coverage is patchy. Cell signal is usually better low and near towns than high or over remote country.
- The hard part is the number. The right one is printed somewhere: in the US Chart Supplement, in your country's AIP, on a sticky note at home. That's no help at 2,000 feet with a dead panel and both hands busy.

That's the problem ZuluCheck solves. The frequency bar at the bottom of every checklist screen shows your local frequencies and 121.5. Tap it, and the radio-failure sheet opens: the phone numbers for the nearest aerodrome (from your location, or your home field), a backup ATC unit such as approach or the area control centre, and the rescue coordination centre. Each is one big button that dials with a single tap. The numbers are stored in the app, so the list appears even with no data signal, along with their source and date. They cover every public-use airport in the United States and the aerodromes of the UK, France and Israel so far, more than 5,000 in all.
If your headset pairs with your phone over Bluetooth, as many current aviation headsets do, the call comes through your ear cups, over the engine. Most Bluetooth headsets run on their own batteries, so they keep working when the panel doesn't.
A laminated card can't dial a phone. Neither, as far as we know, can any other checklist app.
For the full lost-comms procedures in the US, Europe, the UK and Israel, every light gun signal and the real incidents behind them, read our guide to lost comms and light gun signals.
The next step: ZuluCheck, the checklist that fits the pilot
Look at the history of the checklist and you see the same problems again and again. Paper doesn't mark your place. Copied cards drift from the POH. One model year's list gets used in another. Checklists are written in English for pilots who think in Hebrew, French or Japanese. And every school's improvements are stuck on its own printer. ZuluCheck was built to fix exactly those problems, for the pilots who've had the least help so far: students, renters and flying clubs.
- One item at a time, with a big DONE button. ZuluCheck marks your place and shows what's done, the two things Degani and Wiener found paper can't do. Get interrupted by ATC and you come back to the exact line.
- The right list for the exact model. More than 100 aircraft types, each transcribed from a published POH or checklist, with the source named in the app and the handbook one tap away. A 172N is not a 172S, and ZuluCheck doesn't pretend it is.
- Emergencies one tap away, memory items first. A red button on every screen, best glide in view, and the immediate actions at the top of each emergency list. Emergency checklists are free for everyone.
- Radio failure? One tap to call ATC. Tap the frequency bar under any checklist for the nearest tower, approach and rescue numbers, each a one-tap call, with your frequencies and 121.5 always in view.
- Your airplane, your checklist. Customize any list per tail number: add the takeoff briefing, the local transponder code, the departure clearance call. The stock version stays untouched, and any item can be reset to the manufacturer's wording.
- Share it with your whole school. Flight schools and clubs can build one optimized checklist per airplane and send it to every student as a link that opens straight in the app. No reprinting, no faded photocopies, no guessing which version is current.
- In your language. The app speaks 14 languages, from Hebrew and Arabic to Japanese, Korean, Chinese and Ukrainian. Stock checklists are in English (with Hebrew versions for several trainers), and a school's custom lists can be written in whatever language its students think in.
- Fully offline, on the phone or tablet you already fly with, mounted on the yoke, strapped to a kneeboard or clipped to the panel.
ZuluCheck is free forever for two aircraft, with every feature included. ZuluCheck Pro adds unlimited aircraft for clubs, rental pilots and instructors. Running a flight school or club? Email us about sharing checklists across your fleet.
ZuluCheck is for reference only and is not a substitute for the aircraft's approved flight manual. Always verify every checklist against the manual for your specific aircraft, and carry a backup.
Frequently asked questions
What is the difference between a read-do and a do-verify checklist?
With a read-do checklist you read each item and then do it, one line at a time. It's used for abnormal and emergency procedures. With a do-verify (or do-confirm) checklist you configure the airplane from memory using a flow, then read the checklist to confirm the critical items were done. It's used for normal procedures such as before takeoff and before landing.
Are pilots legally required to use a checklist?
In Europe, yes: EASA's NCO.GEN.105(a)(3) makes the pilot in command of any non-commercial flight responsible for ensuring checklists are complied with. In the US, checklists are required for large and turbojet airplanes (14 CFR 91.503) and for airlines (121.315, 135.83). No rule explicitly requires one for a Part 91 pilot in a light single, but the FAA tests checklist use on every practical test.
Can a flight school make its own shortened checklist?
In the US, yes. The FAA says no approval is needed to customize a Part 91 checklist, but it must agree with the AFM/POH, which always takes precedence. The FAA's SAFO 17006 warns pilots to compare third-party checklists carefully with the manufacturer's. EASA's guidance for private pilots recommends the manufacturer's latest checklists.
What are memory items in aviation?
Memory items, or immediate action items, are the few steps pilots must do from memory because there's no time to read them, such as setting best glide speed after an engine failure. The FAA recommends avoiding them where possible and keeping them under three with no conditional steps. After completing them, the pilot confirms them against the written checklist.
Do airline pilots use paper or electronic checklists?
Both, depending on the aircraft. Boeing 777, 787 and 747-8 crews use an electronic checklist that senses switch positions. Boeing 737 crews use a printed checklist and a paper or tablet QRH. Airbus A320 and A330 crews read normal checklists from a card and handle failures on ECAM, while the A350 and A380 also show normal checklists on screen.
Does the Boeing 737 have an electronic checklist?
No. The 737 NG and MAX have no integrated electronic checklist and no EICAS crew-alerting system. Crews use a printed normal checklist and the Quick Reference Handbook, on paper or on Boeing's iPad app.
What is ECAM on Airbus aircraft?
ECAM, the Electronic Centralised Aircraft Monitor, monitors the aircraft's systems. When something fails, it displays the warning and the corrective procedure as a list of actions on the central screen.
Can I use a checklist app instead of a paper checklist?
Generally yes, as long as the content matches your aircraft's flight manual. FAA Advisory Circular 91-78A covers electronic flight bags for Part 91 pilots, and EASA's guidance says to make sure a backup is available when an EFB displays aircraft checklists. Carry the POH or a paper checklist as a backup.
Where did the aviation checklist come from?
From the crash of the Boeing Model 299, the B-17 prototype, at Wright Field on 30 October 1935. The elevator had been left locked. Afterwards, the Army Air Corps had crews follow written checklists for takeoff and other phases of flight.
What should I do if I lose both my radio and my transponder?
Fly the airplane first. Squawk 7600 if the transponder still has power, then follow the lost-comms rules: in the US, 91.185 for IFR flights and 91.129(d) to land at a towered airport (VFR weather, visual contact with the tower and a light-signal clearance); SERA.14083 in Europe. Watch the tower for light signals. If the transponder is dead too, ATC may not see you at all, so when you can do it safely, phone the tower or the controlling ATC unit. The numbers are in the Chart Supplement or your country's AIP, and ZuluCheck dials them with one tap from the frequency bar.
What should I do if I'm interrupted during a checklist?
Go back. FAA guidance says to restart the checklist from the beginning if you're unsure where you stopped, and EASA's guidance says to restart interrupted pre-takeoff checks from a safe point before the interruption. Spanair 5022's After Start checklist was interrupted at the flaps item, and the crew never set the flaps.
Sources
- NTSB AAR-15/03: Gulfstream IV N121JM, Bedford, Massachusetts, 31 May 2014 (opens in a new tab)
- Air & Space Forces Magazine: Walter J. Boyne, "The Checklist" (2013) (opens in a new tab)
- Degani & Wiener, Human Factors of Flight-Deck Checklists: The Normal Checklist, NASA CR-177549 (1990) (opens in a new tab)
- Dismukes & Berman, Checklists and Monitoring in the Cockpit: Why Crucial Defenses Sometimes Fail, NASA/TM-2010-216396 (opens in a new tab)
- Haynes et al., "A Surgical Safety Checklist to Reduce Morbidity and Mortality in a Global Population," NEJM (2009) (opens in a new tab)
- NTSB AAR-88/05: Northwest 255 (opens in a new tab), AAR-89/04: Delta 1141 (opens in a new tab) and AAR-10/03: US Airways 1549 (opens in a new tab)
- CIAIAC A-032/2008: Spanair 5022 (opens in a new tab)
- Flight Safety Foundation, AeroSafety World: Helios 522 (opens in a new tab)
- Aviation Safety Council (Taiwan) ASC-AOR-16-06-001: TransAsia 235 (opens in a new tab)
- ATSB preliminary report AO-2010-089: Qantas 32 (opens in a new tab)
- NTSB Safety Study SS-94/01: flightcrew-involved major accidents (opens in a new tab)
- NTSB Safety Alert SA-067: fuel management (opens in a new tab)
- AOPA: Safety Spotlight, costly mistakes (2020) (opens in a new tab)
- FAA AC 120-71B, Standard Operating Procedures and Pilot Monitoring Duties (opens in a new tab)
- FAA AC 120-64, Operational Use and Modification of Electronic Checklists (opens in a new tab)
- FAA, Human Performance Considerations in the Use and Design of Aircraft Checklists (1995) (opens in a new tab)
- FAA Airplane Flying Handbook (FAA-H-8083-3C) (opens in a new tab) and Pilot's Handbook of Aeronautical Knowledge (FAA-H-8083-25C) (opens in a new tab)
- FAA Private Pilot Airplane ACS (FAA-S-ACS-6C) (opens in a new tab)
- FAA SAFO 17006: commercial off-the-shelf checklists (opens in a new tab) and FAASTeam: "A Check-up on Checklist Customization" (2024) (opens in a new tab)
- FAA Aeronautical Information Manual, chapter 6 section 4: two-way radio communications failure (opens in a new tab), 14 CFR 91.185 (opens in a new tab), 91.129 (opens in a new tab) and 47 CFR 22.925 (opens in a new tab)
- EASA: changes to SERA, including radio communication failure (SERA.14083) (opens in a new tab) and UK CAA SN-2025/005: radio communication failure procedures (opens in a new tab)
- 14 CFR 91.503 (opens in a new tab), 121.315 (opens in a new tab) and 135.83 (opens in a new tab)
- FAA AD 2020-24-02, Boeing 737 MAX (opens in a new tab) and The Air Current: checklists and the 737 MAX return (2019) (opens in a new tab)
- EASA Easy Access Rules for Air Operations (Part-NCO, Part-ORO, Part-CAT) (opens in a new tab) and for Aircrew (Part-FCL) (opens in a new tab)
- ICAO Annex 6 Part II (Swiss FOCA copy) (opens in a new tab)
- UK CAA CAP 676: design, presentation and use of emergency and abnormal checklists (opens in a new tab) and Safety Sense Leaflet 1: Good Airmanship (opens in a new tab)
- Landman et al., the influence of surprise on upset recovery (TNO, 2017) (opens in a new tab)
- Myers, review of electronic checklist research, International Journal of Aviation, Aeronautics and Aerospace (2016) (opens in a new tab)
- Boeing patent US5454074, electronic checklist system (opens in a new tab)
- AIN: Boeing 787 flight deck (2017) (opens in a new tab) and Boeing: 747-8 avionics (2007) (opens in a new tab)
- Airbus Flight Operations Briefing Note: normal checklists (opens in a new tab) and Airbus: electronic QRH (2017) (opens in a new tab)
- Embraer eQRH app (opens in a new tab)
- ATR: the ATR cockpit (opens in a new tab) and AviTrader: ATR Standard 3 avionics certified (2017) (opens in a new tab)
- Cirrus SR-series G7 announcement (2024) (opens in a new tab)
- Garmin Checklist Editor (opens in a new tab)
- Cessna 172P Information Manual (1982) and Cessna 172S POH

