Skip to content
Vol. 1 · Ed. 2026
CyberGlossary
Entry № 1238

Wi-Fi 7

What is Wi-Fi 7?

Wi-Fi 7The marketing name for IEEE 802.11be, introducing 320 MHz channels, 4K-QAM, and Multi-Link Operation, with WPA3 as the mandatory security baseline.


Wi-Fi 7 (802.11be Extremely High Throughput) extends Wi-Fi 6/6E with 320 MHz channels in the 6 GHz band, 4K-QAM modulation, and Multi-Link Operation (MLO), which lets a client use multiple bands simultaneously. From a security perspective, Wi-Fi 7 mandates WPA3-SAE (Simultaneous Authentication of Equals) and 802.11w Protected Management Frames, eliminating WPA2-PSK as a certified option. MLO introduces new key-derivation and roaming considerations: keys are bound to the MLD (multi-link device) rather than to a single radio, so misconfiguration can bypass per-link controls. Operators should pay attention to enterprise-grade authentication (802.1X/EAP), client driver maturity, and detection for downgrade or rogue-AP attacks specific to MLO.

Examples

  1. 01

    A Wi-Fi 7 AP using MLO to aggregate 5 GHz and 6 GHz links for lower latency.

  2. 02

    Migrating an enterprise SSID to WPA3-Enterprise 192-bit when adopting Wi-Fi 7.

Frequently asked questions

What is Wi-Fi 7?

The marketing name for IEEE 802.11be, introducing 320 MHz channels, 4K-QAM, and Multi-Link Operation, with WPA3 as the mandatory security baseline. It belongs to the Network Security category of cybersecurity.

What does Wi-Fi 7 mean?

The marketing name for IEEE 802.11be, introducing 320 MHz channels, 4K-QAM, and Multi-Link Operation, with WPA3 as the mandatory security baseline.

How does Wi-Fi 7 work?

Wi-Fi 7 (802.11be Extremely High Throughput) extends Wi-Fi 6/6E with 320 MHz channels in the 6 GHz band, 4K-QAM modulation, and Multi-Link Operation (MLO), which lets a client use multiple bands simultaneously. From a security perspective, Wi-Fi 7 mandates WPA3-SAE (Simultaneous Authentication of Equals) and 802.11w Protected Management Frames, eliminating WPA2-PSK as a certified option. MLO introduces new key-derivation and roaming considerations: keys are bound to the MLD (multi-link device) rather than to a single radio, so misconfiguration can bypass per-link controls. Operators should pay attention to enterprise-grade authentication (802.1X/EAP), client driver maturity, and detection for downgrade or rogue-AP attacks specific to MLO.

How do you defend against Wi-Fi 7?

Defences for Wi-Fi 7 typically combine technical controls and operational practices, as detailed in the full definition above.

What are other names for Wi-Fi 7?

Common alternative names include: 802.11be, Extremely High Throughput Wi-Fi.

Related terms