Every Known Silo in Hugh Howey's Silo Trilogy: Silos 1, 2, 12, 17, 18, 40 and the Fifty-First

Reference Guide · The Silo Trilogy

Fifty buried chambers, one hidden command post, and a fifty-first destination nobody inside was ever told about. This is the archive of what the books actually tell us about each of them.

Book canon only

Everything in this guide comes from Hugh Howey's novels Wool, Shift and Dust, not the Apple TV+ series Silo. The show renames characters, reshapes the before-times and handles the other silos differently, so none of its details apply here. For the screen comparison, see The Astromech's 35 differences between the Wool books and the Silo TV show.

Full spoilers for the entire trilogy follow, including every silo's fate.

One buried silo entrance among the fifty in Hugh Howey's Silo trilogy

Each silo believed it was alone. From Silo 1, they were a grid of numbers, scores and switches.

At a Glance: The Known Silos

Silo	Role in the story	Key figures	Fate
1	Hidden command post	Donald, Thurman, Anna, Charlotte, Darcy	Destroyed from within (Dust)
2	Helen's silo	Helen (as Karma Brewer), Mick Webb	Fate after Dust unknown
12	Donald's first kill	"Troy" (Donald)	Terminated, 2110
17	The ruin and the refuge	Jimmy "Solo" Parker, Elise, Juliette	Terminated, then abandoned for the surface (Dust)
18	Wool's main setting	Juliette, Holston, Bernard, Lukas, Mission	Reset (2212), terminated (Dust)
40	The spreading dark	Donald, Anna (from Silo 1)	Destroyed, 2212
"51"	Seed, the hidden inheritance	Juliette's survivors	Reached at the end of Dust

1. Operation Fifty: How the System Works

The silos are the product of a programme the books name World Order Operation Fifty, shortened to WOOL, with the "L" standing for the Roman numeral fifty. It was conceived by Senator Paul Thurman with the psychologist Victor and the nanotechnology specialist Erskine, and its buildings were designed by Congressman Donald Keene, who believed he was working on CAD-FAC, a Containment and Disposal Facility for nuclear waste outside Atlanta. The fuller story of the men behind it is told in The Astromech's who created the silo and why.

The founders' reasoning was pre-emptive. Convinced that weaponised self-replicating nanotechnology would eventually end the species, they decided to end the existing world themselves, on their own schedule, and preserve selected populations underground. In 2052, during a party convention in Atlanta, the plan went live. Atlanta was destroyed, the surface was seeded with lethal nanomachines, and the chosen were herded into the buried silos.

The structure

Fifty silos, each a deep, self-contained underground city built around a single central spiral staircase, with farms, Mechanical, Supply and an IT department.
Silo 1 is the hidden command silo, staffed by founders and functionaries who sleep in cryogenic pods and wake for rotating shifts.
The other forty-nine are populations raised in ignorance under a rulebook called the Pact.
Seed, a separate facility beyond the poisoned zone, holds food, tools, plant stock and materials for rebuilding the world.

The chain of command

The Shepherd, the head of Silo 1, oversees every silo.
Each silo's head of IT is the only person inside who knows Silo 1 exists. They are inducted by the Shepherd, take instructions over a hidden line from the server rooms, and maintain the illusion for everyone else.
The silo's visible leaders, the mayor and sheriff, govern without knowing who really governs them.
Silo 1 can intervene directly. It can wipe records, drug the population through the water in a reset, or terminate the entire silo.

The isolation by design

No silo is told the others exist. The silos sit in a cluster, but the surface between them is a killing ground, the cafeteria screens show only dead hills, and cleaners' suits are sabotaged with inferior heat tape so that anyone sent out dies in view of the camera, reinforcing the lie. Isolation is not a side effect. It is the experimental condition. Each population can be watched, scored and, if necessary, deleted without contaminating the others. The Astromech has examined the most famous instrument of that control in why they clean in Wool.

The real endgame

Silo 1 continually ranks the silos on stability and obedience. When the time came, roughly five centuries after the collapse, one winning silo was to be released to resettle the Earth from Seed. Every other silo would be terminated, and so would Silo 1 itself, its sleepers included, so that no one carrying the old world's dangerous knowledge would survive. Donald discovers this provision, the Pact behind the plan, in Third Shift. The full logic is unpacked in why only one silo was supposed to survive.

The master timeline

2049: Donald Keene is recruited to design CAD-FAC.
2052: The Atlanta convention. The world ends and the silos are sealed. Helen goes to Silo 2; Donald to Silo 1.
2110: Donald's first shift as "Troy". Silo 12 is terminated.
2212: Donald's second shift. The Silo 40 crisis and Silo 40's destruction; Silo 18's uprising and reset; Donald learns Helen's fate.
Between shifts: Silo 17 rebels and is terminated. Young Jimmy Parker survives alone.
2345: The events of Wool. Juliette is sent to clean and walks to Silo 17. Donald wakes under Thurman's name.
Dust: The dig between 18 and 17; Silo 18 terminated; Silo 1 destroyed; the survivors walk out toward Seed.

2. The Known Silos

The command hub

Silo 1

Status: Destroyed from within at the climax of Dust.

Key characters: Donald Keene (as "Troy", then as "Thurman"), Senator Paul Thurman, Anna Thurman, Victor, Erskine, Charlotte Keene, Mick Webb (briefly, in the before-times), and the security officer Darcy.

Timeline and key events

2052: Sealed with the founders inside.
2110: Troy's shift. He orders Silo 12's termination and starts refusing the memory-suppressing pills.
2212: Thurman wakes Donald and Anna to manage failing silos, including 40 and 18. Victor has already taken his own life. Donald tries to walk out into the poison and is dragged back.
2345: Donald wakes as "Thurman", inducts Lukas Kyle as Silo 18's head of IT, kills Anna, finds the Pact, shoots the real Thurman and refreezes him, wakes Charlotte and opens contact with Silo 18.
Dust: Charlotte flies a drone beyond the hills and sees living land. Anna's body is found, Thurman is revived and retakes command, and orders Silo 18's termination. Darcy dies covering Charlotte's escape. Thurman shoots Donald, and Donald, dying, fires at the bomb and destroys Silo 1 with Thurman inside.

What makes it different

No families, no generations. Men work six-month shifts and return to cryogenic sleep; women are kept frozen and are not supposed to be woken at all.
Chemical obedience. Shift-workers take pills that blunt memory and grief, so they can administer atrocity without breaking.
Its own rulebook. Silo 1 runs on the Order, a procedural manual for handling failing silos, while the hidden Pact sets out the endgame.
Total sight. It sees every silo's data, hears every IT line and holds the switches that end populations.

Thematic significance

Silo 1 is power without accountability, government reduced to procedure and spread so thinly across sleepers and centuries that no single person ever has to own a decision. Its destruction is the trilogy's real victory. Donald does not pick a better winner of Operation Fifty. He removes the only authority that could ever pick one.

Helen's silo

Silo 2

Status: Active when last seen. The books do not say what becomes of it after Silo 1 falls.

Key characters: Helen Keene, living under the name Karma Brewer, and Mick Webb.

Timeline and key events

2052: Separated from Donald in the convention chaos, Helen is taken into Silo 2. So is Mick Webb, because Anna Thurman secretly swapped Mick's assignment with Donald's so that Donald would stay in Silo 1 with her.
Helen's lifetime: She marries Mick, has two children, works as a teacher and later a judge, and dies at eighty-two.
2212: Searching the databases, Donald guesses Helen would have chosen the name of their dog, Karma, and finds her record. During his suicide attempt that shift, he climbs far enough up the ridge to glimpse the top of the silo where she lived and died.
2345: Donald finally learns the switch was Anna's doing.

What makes it different

Silo 2 is the only silo in the trilogy we know almost entirely through one ordinary, good life. No uprising, no termination on the page: just a woman who rebuilt a family underground and chose a name only her husband would recognise.

Thematic significance

Silo 2 is the human cost written small. The architect of the system loses his wife not to bombs but to a scheduling change made by someone who wanted him. It also proves something the founders never believed: people inside the silos could live full, decent lives. That makes everything Silo 1 does to them harder to excuse.

The first termination

Silo 12

Status: Terminated in 2110, all inhabitants killed.

Key characters: Troy, who is Donald Keene with his memory suppressed. Silo 12's own residents are never named.

Timeline and key events

2110: Silo 12 fails during Troy's first shift as head of Silo 1, and Troy authorises its termination.
Aftermath: Troy writes a report on why Silo 12 fell.
2212: Victor became obsessed with that report before his suicide, and it is part of why Donald is woken again to help understand why silos fail.

What makes it different

We never go inside Silo 12. It exists in the books only as a decision made from a desk, which is exactly the point.

Thematic significance

Silo 12 is complicity made concrete. A medicated man follows procedure and thousands die, and the paperwork he writes afterward becomes a tool for running the system better. It is also the turning point in Donald's psychology: the atrocity that the pills are meant to make bearable, and the memory that, once it surfaces, he can never put down. The Astromech explores that arc in depth in its Donald Keene character analysis.

The ruin and the refuge

Silo 17

Status: Terminated by Silo 1 after its uprising; later becomes the refuge for Silo 18's survivors; finally abandoned as they head for the surface.

Key characters: Jimmy Parker ("Solo"), his father (who worked in IT) and mother, the young Elise and the other children born to scattered survivors, Juliette Nichols, and in Dust the survivors of Silo 18.

Timeline and key events

The uprising: On the day before a cleaning, violence sweeps up the stairs. Jimmy's mother pulls him out of class and they flee through the silo as the mob closes in.
The termination: Silo 1 ends the silo. Jimmy survives by hiding, as his father had prepared him to, in the protected IT levels.
Decades alone: Jimmy lives for years without other adults, keeping the servers and himself running. A few other survivors persist elsewhere in the ruin, and their children, including Elise, grow up wild among the empty levels.
2345 (Wool): Juliette, sent to clean from Silo 18, walks over the hill, enters Silo 17, and finds Solo. Through him she learns the other silos exist and how to call them.
Dust: Juliette's dig breaks through from Silo 18. When Thurman terminates 18, about two hundred people escape through the tunnel into 17, and a friend sacrifices herself to seal it behind them. Silo 17, once written off, becomes the last shelter, and the departure point for the walk to Seed.

What makes it different

Flooded, looted and largely dark by Juliette's time, its lower levels drowned.
A society without the Pact: the children of 17 grow up with no IT, no Judicial and no cleanings.
The only silo that is both a grave and a lifeboat.

Thematic significance

Silo 17 is the warning and the answer in one place. It shows what Silo 1's procedures actually do to people, and Jimmy's lonely survival is isolation, the system's core design principle, pushed to its human limit. Yet it is also where Silo 18 is saved. The silo the experiment marked as a failure becomes the bridge to the future, which is the trilogy's whole argument in architectural form.

Juliette's home

Silo 18

Status: Terminated by Thurman in Dust. Around two hundred survivors evacuate to Silo 17 and then the surface.

Key characters: Juliette Nichols, Sheriff Holston and his wife Allison, Mayor Jahns, Deputy Marnes, Bernard Holland (IT head), Lukas Kyle, Walker, Knox and the Mechanical crew; in Shift, the porter Mission Jones and the teacher Mrs Crowe.

Timeline and key events

2212, the Great Uprising: Silo 18 rises up. Mission, a young porter, is swept into the violence. In Silo 1, Donald works out that the resistance is fed by someone who still remembers the world before, helps identify an elderly woman, and her execution is ordered. Donald and Thurman choose a reset over termination: records are wiped, the population is drugged through the water, and the survivors emerge compliant, with the uprising remembered only as myth.
2345, Wool: Allison discovers the visor's green landscape is fake and goes out to clean. Holston follows her. Jahns and Marnes recruit Juliette from Mechanical as sheriff. Bernard has Jahns poisoned, takes control, and sends Juliette to clean, but Mechanical and Walker get her a suit with good heat tape and she walks over the hill. Mechanical rises against IT. Juliette returns, Bernard is sent out, and Lukas becomes head of IT, inducted by Donald in Silo 1.
Dust: Juliette, now mayor, digs toward Silo 17 using the old boring machine behind the wall in Mechanical. Unrest and religious opposition grow into riots. Thurman, back in command, terminates the silo with poison gas. Lukas dies in IT. Juliette leads the survivors through the tunnel to 17.

What makes it different: the Mechanical and IT divide

Silo 18's power runs vertically. IT sits high in the silo, holds the servers, the secret line to Silo 1 and the forbidden Legacy of history. Mechanical sits in the Down Deep, keeping the generator, pumps and air running with no access to the truth. The whole drama of Wool is a collision between these two forms of knowledge: IT knows what is real and hides it; Mechanical knows how things actually work and cannot stop testing them. Juliette's victory is a mechanic's victory.

Thematic significance

Silo 18 is the system seen from inside, and the trilogy's proof that it can be broken. It has been reset once already, which is why its history is missing, and its second rising is not erased but carried out over the hill. Its termination is the price of that defiance. Its survivors are its legacy.

The spreading dark

Silo 40

Status: Destroyed during the 2212 crisis, on Donald's second shift.

Key characters: No named residents. Its story is told from Silo 1, through Donald and Anna.

Correcting a common myth

Silo 40 is often described online as a rogue silo that cut its communications and survived beyond Silo 1's reach. That is not book canon. Howey has confirmed that Silo 40 is gone and that Donald ordered its bombing on his second shift. He has added that some survivors from Silo 40 ended up in other silos.

Timeline and key events

2212: Silo 40's unrest spreads in a way the founders cannot see or stop, part of the wave of failing silos that drives Thurman to wake Donald and Anna.
The response: Working from Silo 1, Anna handles collapsing silos with cold operational competence while Donald grieves. Silo 40 is bombed.
The loose thread: In Third Shift, young Jimmy Parker plugs into a jack labelled "40" in Silo 17's comms room and hears someone answer. Readers have long asked how, given the silo was destroyed decades earlier. Howey's remark about survivors scattering into other silos is the closest thing to an answer.

What makes it different

Silo 40 is the rebellion Silo 1 could not manage by the usual tools. Rather than a reset or a quiet gassing, it required bombing.

Thematic significance

Silo 40 is the system's fear made real: a population that slipped beyond the founders' control. That it had to be destroyed by force exposes the limits of their supposedly total oversight, and the hint that some of its people survived elsewhere suggests that defiance, once loose, does not stay inside one set of walls.

The fifty-first

Seed

Status: Reached by Juliette's survivors at the end of Dust.

Seed is not one of the fifty, but it belongs in any map of the silos. It is a prepared storehouse beyond the poisoned zone, stocked with food, equipment, plant material and the means to restart civilisation, intended for the single silo Operation Fifty would eventually release. Each silo's buried digging machine was part of the route there. Howey himself has described Juliette's destination as effectively opening a fifty-first silo.

Thematic significance: Seed was meant to reward obedience. It is reached instead by survivors of two officially failed silos, guided by a woman Silo 18 tried to execute. The inheritance goes to the people the experiment wrote off.

3. Points of Connection

What the failing silos have in common

Memory is the trigger. Silo 18's uprising is fed by someone who remembers the world before. Rebellions spread when the past leaks through.
IT is the fault line. Every silo's secrets run through its IT department and its hidden line to Silo 1. Silo 18's Bernard enforces the lie; Jimmy's father in 17 used IT knowledge to save his son; Lukas inherits the role and turns it toward the truth.
Rebellions are cyclical. Silo 18 has risen before and been reset. The resets do not prevent uprisings. They only erase the lessons, so each generation starts again.
The response escalates. Silo 1 has a ladder of tools: the cleanings, the reset, and finally termination by gas or, in Silo 40's case, bombing.
The cleanings fail eventually. Every silo's propaganda depends on cleaners dying on camera. When one does not, as Juliette does not, the whole architecture of belief starts to crack.

The rest: Silos 3–11, 13–16, 19–39 and 41–50

The books never go inside the remaining silos. They exist as numbers on Silo 1's screens and as voices on the comms jacks Solo shows Juliette. What we know is their intended fate: to be ranked, and then, all but one, to be terminated when the chosen silo was released to Seed.

Donald's destruction of Silo 1 changes that. With no Shepherd left, nobody can order a reset or a termination ever again. But nobody is coming to free them either. At the end of Dust, the remaining silos are still sealed, still believing they are alone, still sending cleaners to die. Many readers have wished Juliette had at least tried to contact them. Howey's view is that, frightened even of drilling into one neighbouring silo, Juliette chose to save the people in front of her. The fate of the rest is the trilogy's great open question.

4. Meta Note: The Future of the Lore

In 2021, Hugh Howey posted that he had begun work on a new entry in the series about Silo 40. More recently he has spoken about a further Silo trilogy in the works, though with no title or release date announced at the time of writing.

Silo 40 is a natural choice. It is the silo the founders could not control by ordinary means, the one Donald personally ordered destroyed, and, according to Howey, one whose survivors scattered into other silos. That leaves enormous room: what did Silo 40 know, how did its people get out, and what did they carry into the silos that took them in? It also connects to the trilogy's loose thread, the voice answering Jimmy's call on the jack marked "40". Whatever Howey writes, it will need to be told from inside the silo, which would make it the first time we see Operation Fifty's crackdown from the people on the receiving end.

Silo Guide: Frequently Asked Questions

How many silos are there in the Silo books?

Fifty, including Silo 1, the hidden command silo. Seed, the supply facility beyond the poisoned zone, is sometimes described as a fifty-first destination.

What happened to Silo 40?

It was destroyed during the 2212 crisis, bombed on Donald's orders during his second shift. Howey has said some of its survivors ended up in other silos.