To prevent abrupt braking from occurring due to double boosting during failsafe in which a value obtained by multiplying a detected master cylinder hydraulic pressure value and a predetermined boosting ratio is set to wheel hydraulic pressure if the boosting fails during the braking.

If the boosting fails at t3 during the braking in which a brake depressing force is kept at 20 N and master cylinder hydraulic pressure Pm=5 MPa is set to wheel cylinder hydraulic pressure Pw=5 MPa, after the failure time t3, a failsafe operation is performed to hold the wheel cylinder hydraulic pressure Pw at 5 MPa at the failure t3. Since the failsafe operation at the time of failure during the braking does not excessively increase the wheel cylinder hydraulic pressure Pw by the double boosting, the possibility of abrupt braking with the sense of incongruity can be eliminated.