Who Controls Nuclear Weapons?

How the System Works

Nuclear weapons in the United States cannot be launched by a single person deciding to launch them. The system is built, at every level, to prevent that. Presidential authorization is required — not a suggestion, not a formality, but a hard requirement embedded in both the technical architecture and the command structure. Without a valid Emergency Action Message authenticated against the current authentication codes, missile crews cannot complete a launch sequence.

The process starts at the top. The President, with the nuclear football — the portable command and communication system that accompanies him everywhere — can transmit a launch order through the National Military Command Center. That order goes through the chain of command to Strategic Command and then to the actual launch crews. At every step, authentication is required. The people receiving the order must verify that it is genuine, that it comes from proper authority, and that it meets the criteria for execution.

The Two-Person Rule

At the execution level, the two-person rule is the final safeguard. No single person can complete the launch of a nuclear weapon. Two people must simultaneously turn their keys, enter their codes, and confirm the launch command within the prescribed time window. The physical design of missile launch facilities — with the two key stations placed far enough apart that one person cannot reach both simultaneously — enforces this at the hardware level.

This is not a recent innovation. The two-person rule has been embedded in American nuclear weapons procedures since the 1960s, after a series of internal reviews found that the early nuclear force had inadequate controls against both accidental launch and unauthorized use. The Permissive Action Link — the electronic lock system that prevents nuclear weapons from being armed without proper authorization codes — was developed in the same period and has been continuously upgraded since.

Close Calls

The history of nuclear close calls is longer and more disturbing than most people know. In 1983, a Soviet satellite early-warning system detected what appeared to be an American first strike — five Minuteman missiles inbound. Stanislav Petrov, the duty officer, concluded that the detection was a false alarm based on what he knew about American doctrine and the limited number of warheads detected. He was right. The system had malfunctioned. His decision not to report a confirmed launch up the chain of command prevented an automated Soviet response that might have triggered the war the false alarm invented.

During the Cuban Missile Crisis in 1962, a Soviet submarine — B-59 — lost communication with Moscow and found itself under depth-charge attack by American naval forces. The submarine commander, Valentin Savitsky, believed war had started and moved to arm and fire the nuclear torpedo aboard. Under Soviet doctrine, the authorization of all three senior officers aboard was required. Two agreed. The third — Vasily Arkhipov, the flotilla commander — refused. The torpedo was not fired. The crisis eventually resolved. Arkhipov died in 1998. He may have saved the world.

The Iran Context

The combination of Iranian nuclear ambitions and the current regional tensions raises questions about nuclear command and control on multiple sides. Israel's nuclear posture is deliberately ambiguous — the country neither confirms nor denies its arsenal. American tactical nuclear weapons are positioned in Europe under NATO arrangements. Iranian nuclear capability, if developed, would add a third nuclear actor to an already volatile region.

What the history of nuclear close calls shows is that the greatest risk is not a deliberate first strike by a rational actor. It is the system failing in ways that weren't anticipated, at a moment when humans with incomplete information must make decisions in seconds. The Soviet early-warning false alarm of 1983 could have triggered a real war. The Cuban submarine torpedo could have triggered a real war. The safeguards exist precisely because humans under pressure make mistakes — and nuclear systems must be designed to survive those mistakes without firing.

READ NEXT — BOOKS ON THIS OPERATION

Affiliate links — as an Amazon Associate we earn from qualifying purchases.