PlumbRevise
Guides

Flame supervision device explained: what an FSD does and how it fails

A flame supervision device is a small component with a big safety job: it proves that a burner flame is present. If flame is not proven, gas must not keep flowing to that burner. That idea appears across CCN1, cookers, fires, boilers and unsafe-situations scenarios.

Short answer

An FSD proves flame and stops gas continuing to pass if the burner is not safely alight.

What an FSD does

FSD means flame supervision device. You may also see FFD, flame-failure device. The principle is the same in revision terms: the appliance must not continue passing unburnt gas when the flame has gone out or has not been established.

Diagram showing burner flame proving, sensor signal, gas valve and shut-off if flame is not proven.
Revision schematic: flame proven means the valve can remain open; no proven flame means gas shuts off.

The main FSD types

You do not need to memorise every design, but assessments expect you to recognise the main families and the safety outcome each one delivers.

  • Thermoelectric (thermocouple): heat from the pilot or burner flame generates a small voltage — a few tens of millivolts — which energises an electromagnet that holds the gas valve open. Lose the flame and the junction cools, the magnet releases and the valve closes. Closure is not instant, because the thermocouple has to cool first. Typical homes: older fires, cookers, water heaters and pilot-light appliances.
  • Flame rectification (ionisation): a flame between the sensing electrode and the burner conducts electricity unevenly, turning an applied AC signal into a small DC current of a few microamps. The burner control looks for that rectified DC component, which is why a simple short circuit does not fake a flame. Detection and shutdown are fast. Typical homes: modern boilers and many automatic-ignition cookers and hobs.
  • Atmosphere-sensing (oxygen depletion system, ODS): a precision pilot is designed so that when room oxygen falls below the design level, the flame lifts away from the thermocouple, cools it and shuts the appliance down. It is built around a thermoelectric FSD but protects against vitiated air as well as flame loss. Typical homes: flueless heaters and some open-flued fires.
  • Thermopile: a stack of thermocouples giving a larger output that can also power a control circuit — you may meet it on older floor-standing boilers and heaters.
  • Ultraviolet and other sensing cells: mainly commercial and industrial burners; know they exist rather than the detail.

Thermocouple, thermopile or ionisation probe?

A common exam and diagnosis mistake is treating these as interchangeable. A thermocouple makes just enough electricity to hold a magnet open; a thermopile makes enough to run a simple control circuit; an ionisation probe makes no useful power at all — it only passes a tiny rectified current that the burner control interprets. Identify which system the appliance uses before reasoning about a fault, because the failure logic is different for each.

Where it appears in assessment

  • Cookers and hobs (CKR1 territory): newer domestic cookers and hobs are generally fitted with flame supervision on the burners, but many older appliances still in service are not. Questions often turn on the installation context — settings such as boats and residential park homes carry stricter flame-supervision expectations, so check the current requirements for the installation type rather than assuming one rule.
  • Boilers and water heaters (CENWAT territory): flame proving is a stage in the ignition sequence — spark or ignitor, flame established, flame proved within the control’s safety time, then main gas held open. A boiler that ignites and then locks out is usually failing the proving stage, not the ignition stage.
  • Fires and space heaters (HTR1 territory): flame supervision links with spillage checks, the flame picture and the ODS distinction — an atmosphere-sensing pilot shutting down repeatedly can be telling you about the room air, not a faulty component.
  • Unsafe situations: a failed, disabled or bypassed flame-safety device is not a minor convenience fault; it belongs in the unsafe-situations procedure.

Common symptoms and what they point to

  • The burner lights but goes out when the control knob is released: think thermoelectric — the thermocouple is not holding the magnet. Consider tip position in the flame, connections and the magnet unit.
  • The pilot will not stay lit after the warm-up period: same circuit, but also ask why the flame is weak — a partially blocked pilot gives a cool, lazy flame that never heats the junction properly.
  • The appliance sparks, lights briefly, then locks out: think rectification — probe condition and position, the sensing lead, burner earthing, and supply polarity. On many rectification systems a reversed live and neutral or a poor earth can stop flame detection completely, which is why electrical checks appear in gas fault questions.
  • An atmosphere-sensing appliance keeps shutting down in one room: consider air supply and ventilation before condemning the pilot assembly.
  • A burner is alight but the safety device has been damaged, disabled or bypassed: the appliance may “work”, and it is still not safe to leave in use.

How operation is proved

The revision principle: you prove an FSD by letting it see a flame loss and confirming gas is cut off, following the manufacturer’s instructions for the appliance — for a thermoelectric device that includes allowing for the cooling delay before shutdown. What is never acceptable is wedging, bypassing or “temporarily” defeating the device to keep an appliance running: the safe answers in assessment always preserve the safety chain.

Exam angle

The important answer is rarely “replace the thermocouple” in isolation. The assessment angle is the safe decision: prove the safety device operates, follow manufacturer instructions, do not bypass it, and do not leave an appliance in use if flame supervision cannot be relied on.

Quick answers

What does a flame supervision device do?

It proves that flame is present and shuts off, or prevents continued gas flow, if flame is not proven.

Is FSD the same as FFD?

In learner use they are often used for the same safety idea. FSD is flame supervision device; FFD is flame-failure device.

Is an oxygen depletion system the same as an FSD?

They are related but not identical. An ODS is built around a thermoelectric flame-supervision pilot, but its job is to shut the appliance down when room oxygen falls — it protects against vitiated air as well as flame loss.

Where is the FSD on a gas cooker?

On flame-supervised cookers and hobs, look for a small probe tip sitting beside each burner’s flame ports — the thermocouple or sensing electrode. Older cookers may have no flame supervision on the hob burners at all.

Why does a boiler ignite and then lock out?

Usually because flame was not proved within the control’s safety time. On rectification systems, think probe condition and position, sensing lead, burner earthing and supply polarity — not just the ignition spark.

Can you bypass a flame supervision device for testing?

No. A flame-safety device is part of the appliance safety chain. Assessment answers should favour manufacturer instructions and safe isolation if operation cannot be proved.

Where next
CCN1 revision plan Domestic ACS modules explained CENWAT revision guide Flue flow and spillage guide Try CCN1 practice Try CKR1 cooker practice Gas ACS revision path

Spotted something wrong, unclear or out of date in this guide? Email help@plumbrevise.co.uk with the guide name — content reports are treated as product defects, not support noise.