Abstract: In an elevator controller employing a microcomputer (MPU) for executing several kinds of controls, the MPU supplies an operation checking signal to an MPU checking circuit simultaneously with the operation of a starting contactor or relay, and, if a response to the operation checking signal is not fed back to the MPU within a predetermined time, the MPU recognizes an abnormal condition of the MPU or of the MPU checking circuit and prohibits the elevators from starting to travel. The checking operation of the MPU and the MPU checking circuit is executed each time the starting relay or contactor operates.