What is the difference between crew and passenger oxygen systems on a transport-category airplane?

Crew systems use high-pressure gaseous cylinders with quick-don pressure-demand masks that can deliver oxygen under positive pressure for extended high-altitude operations, while passenger systems are designed only to sustain occupants during an emergency descent—typically using continuous-flow masks fed by either compressed gas cylinders or chemical oxygen generators that produce oxygen for roughly 12–22 minutes.

How does a chemical oxygen generator work on a commercial aircraft?

A chemical oxygen generator contains a sodium chlorate candle that produces oxygen through a heat-generating chemical reaction when a firing pin is triggered by pulling the mask lanyard. Once activated, the reaction cannot be stopped and provides a continuous flow of oxygen for approximately 12–22 minutes depending on candle size, which is sufficient to protect passengers during an emergency descent to a safe altitude.

When must a flight engineer don oxygen on a pressurized airline flight?

Any time cabin altitude rises unexpectedly or pressurization is in doubt, the flight engineer should immediately don a quick-don pressure-demand oxygen mask—the regulatory design standard allows one-handed donning in five seconds or less precisely because hypoxia impairs judgment before the victim is aware of a problem. Above approximately 25,000 ft, time of useful consciousness without oxygen can be just a few minutes, making early mask use critical.

Oxygen Systems: Crew, Passenger, and Portable Sources

When a pressurized aircraft loses cabin pressure at altitude, the time of useful consciousness can shrink to seconds. Oxygen systems are the last line of defense between that physiological emergency and catastrophe. For flight engineers, understanding the design, operation, and regulatory basis of crew, passenger, and portable oxygen systems is not merely an exam topic—it is a core survival skill and a primary duty during any pressurization abnormality.

Large transport-category airplanes typically carry three distinct but complementary oxygen systems: a crew (flight deck) system designed for prolonged use at high altitude, a passenger (cabin) system designed to protect occupants during a rapid descent to a safe altitude, and portable units that serve both first-aid and walk-around functions throughout the cabin. Each system uses different oxygen sources, pressure regulators, and masks, reflecting the different duration and mobility requirements of its users.

How Oxygen Systems Work

Crew Oxygen System

The flight-deck oxygen system is built around one or more high-pressure cylinders—typically charged to approximately 1,850 psi when full—storing gaseous oxygen. These cylinders feed a pressure-reducing regulator that drops the supply to a working pressure suitable for delivery through the crew masks. Crew masks are quick-don, pressure-demand masks: they can be donned with one hand in five seconds or less and, at altitudes requiring it, deliver oxygen under positive pressure so that even a leaking face seal cannot allow cabin air to dilute the supply. Pressure-demand operation begins automatically above a set cabin-altitude threshold (often around 30,000–34,000 ft cabin altitude) ensuring the crew always receives 100% oxygen at the correct partial pressure.

A diluter-demand setting allows ambient cabin air to be mixed with oxygen at lower altitudes, conserving the supply when the cabin altitude is moderate. The regulator typically offers at least three positions: Normal (diluter-demand), 100% (pure oxygen on demand), and Emergency (positive-pressure flow). Many regulators also include a Test/Reset function. Crew oxygen quantity is read on a cockpit gauge calibrated in pressure (psi) and, on modern aircraft, cross-referenced to a quantity table that accounts for cylinder temperature and volume to give a usable duration estimate.

Passenger Oxygen System

Passenger systems are not designed for extended high-altitude operations; they are designed to keep occupants conscious for the few minutes needed for the crew to execute an emergency descent. Two fundamentally different technologies are used:

Gaseous (compressed oxygen) systems: One or more cylinders at moderate pressure feed individual passenger service units (PSUs) above each seat row. Flow is typically continuous-flow rather than demand, providing a steady oxygen-enriched stream to the mask. These systems are common on older transport-category designs.
Chemical oxygen generators (solid-state generators): The majority of modern transport aircraft use sodium chlorate or similar chlorate-candle generators. When a passenger pulls the mask lanyard, a firing pin strikes a primer that ignites the chemical reaction, producing a steady flow of oxygen for approximately 12–22 minutes depending on candle size—sufficient for a descent from FL410 to 10,000 ft MSL. Chemical generators are compact, maintenance-light, and have no high-pressure hazard, but once activated they cannot be stopped and generate heat during the reaction.

Federal regulations require that each passenger seat, lavatory, and galley position be equipped with an accessible oxygen source. Passenger oxygen masks are continuous-flow oronasal masks with a small reservoir bag that fills between breaths to increase effective oxygen concentration. The masks fall automatically when cabin altitude exceeds a preset threshold (commonly 14,000 ft), triggered by a pressure-sensing aneroid or by the flight crew manually activating the system from the overhead panel.

Portable Oxygen Units

Portable oxygen units are self-contained cylinders, usually lightweight aluminum or composite, carried throughout the cabin for first-aid and walk-around use. They serve two main purposes: providing therapeutic oxygen to an ill passenger (using a simple continuous-flow mask or cannula) and allowing cabin crew or a flight engineer to breathe while moving through a smoke-filled cabin. Portable units typically have a low-pressure cylinder (about 1,800–2,000 psi when full) and a simple flowmeter regulator offering selectable flow rates (commonly 2, 4, and 8 liters per minute). Some aircraft carry portable protective breathing equipment (PBE)—hood-style devices with a short-duration chemical oxygen source used for fighting fires or moving through smoke—as a distinct subset of portable equipment.

Why Oxygen Systems Matter

Above 10,000 ft cabin altitude, the partial pressure of oxygen in the blood drops sharply; above 25,000 ft, the time of useful consciousness for an unprotected person may be only 3–5 minutes. At 40,000 ft, it can drop to 15–20 seconds. A flight engineer must be able to don a pressure-demand mask in under five seconds precisely because hypoxia impairs judgment before the victim recognizes any problem. Early, aggressive use of oxygen is always the correct action when pressurization is in doubt.

From a systems management standpoint, the flight engineer monitors crew oxygen pressure throughout the flight, verifies that the passenger system is armed (or set to the appropriate mode), and ensures portable units are at their required locations and adequately charged before each flight. During a pressurization emergency, the FE coordinates with the captain on deploying passenger oxygen while simultaneously donning crew oxygen and supporting the emergency descent.

Oxygen also presents hazards that must be managed. Pure oxygen dramatically accelerates combustion; any oil, grease, or petroleum product contamination in an oxygen system is a serious fire or explosion risk. Cylinders must be handled to prevent impacts, and high-pressure lines must not be routed near ignition sources or heat. Chemical oxygen generators become hot during operation and must not be handled immediately after activation.

Key Numbers and Rules

Crew cylinder pressure: typically ~1,850 psi when full; below approximately 500 psi (varies by aircraft) the system is considered insufficient for a full flight.
Chemical generator duration: approximately 12–22 minutes of oxygen flow per generator, dependent on size—enough for a normal emergency descent.
Passenger mask deployment altitude: automatic deployment is generally triggered at or before 14,000 ft cabin altitude (regulatory ceiling under 14 CFR Part 121 for when supplemental oxygen must be provided to passengers).
Pressure-demand activation: typically begins around 30,000–34,000 ft cabin altitude on crew regulators.
Quick-don requirement: crew masks must be donnable with one hand in five seconds or less (a Part 121 operational requirement).
Portable oxygen flow rates: commonly 2, 4, and 8 liters per minute; therapeutic use is typically 2–4 lpm via mask or cannula.
No smoking / no grease rule: oxygen system servicing requires oil-free tools and connectors; oxygen must never contact petroleum-based lubricants.

Memory Aid

CPP — Crew, Passenger, Portable. Use this to remember the three subsystems every time you conduct a preflight oxygen check: verify Crew cylinder pressure, confirm Passenger system is armed, and check Portable units are stowed, charged, and accessible. Each letter represents a system with its own source, regulator type, and mask design.

Common Test Traps

Confusing demand vs. continuous-flow masks: Crew masks are pressure-demand (or diluter-demand); passenger masks are continuous-flow. Mixing these up on an exam or a checkride is a common error.
Thinking chemical generators can be shut off: Once ignited, a chlorate-candle generator cannot be stopped. The oxygen flow continues until the chemical reaction is complete. This is a critical operational and safety fact.
Underestimating hypoxia onset speed: Many students underestimate how rapidly time of useful consciousness collapses above 35,000 ft. The physiological urgency is the reason for the five-second quick-don requirement.
Ignoring cylinder temperature when estimating quantity: Oxygen pressure readings vary with temperature. A cold cylinder may show lower pressure even with adequate oxygen mass; always consult the aircraft's temperature-pressure-quantity chart rather than reading raw psi alone.
Confusing the § 63.31 medical class with the § 63.35 knowledge requirement: The Flight Engineer certificate requires at least a second-class medical certificate under § 63.31; § 63.35 governs the knowledge test. These are separate sections with distinct requirements, and the exam will test whether you know which section addresses which requirement.