Wi-Fi 7
What is Wi-Fi 7?
Wi-Fi 7The marketing name for IEEE 802.11be, introducing 320 MHz channels, 4K-QAM, and Multi-Link Operation, with WPA3 as the mandatory security baseline.
Wi-Fi 7 (802.11be Extremely High Throughput) extends Wi-Fi 6/6E with 320 MHz channels in the 6 GHz band, 4K-QAM modulation, and Multi-Link Operation (MLO), which lets a client use multiple bands simultaneously. From a security perspective, Wi-Fi 7 mandates WPA3-SAE (Simultaneous Authentication of Equals) and 802.11w Protected Management Frames, eliminating WPA2-PSK as a certified option. MLO introduces new key-derivation and roaming considerations: keys are bound to the MLD (multi-link device) rather than to a single radio, so misconfiguration can bypass per-link controls. Operators should pay attention to enterprise-grade authentication (802.1X/EAP), client driver maturity, and detection for downgrade or rogue-AP attacks specific to MLO.
● Examples
- 01
A Wi-Fi 7 AP using MLO to aggregate 5 GHz and 6 GHz links for lower latency.
- 02
Migrating an enterprise SSID to WPA3-Enterprise 192-bit when adopting Wi-Fi 7.
● Frequently asked questions
What is Wi-Fi 7?
The marketing name for IEEE 802.11be, introducing 320 MHz channels, 4K-QAM, and Multi-Link Operation, with WPA3 as the mandatory security baseline. It belongs to the Network Security category of cybersecurity.
What does Wi-Fi 7 mean?
The marketing name for IEEE 802.11be, introducing 320 MHz channels, 4K-QAM, and Multi-Link Operation, with WPA3 as the mandatory security baseline.
How does Wi-Fi 7 work?
Wi-Fi 7 (802.11be Extremely High Throughput) extends Wi-Fi 6/6E with 320 MHz channels in the 6 GHz band, 4K-QAM modulation, and Multi-Link Operation (MLO), which lets a client use multiple bands simultaneously. From a security perspective, Wi-Fi 7 mandates WPA3-SAE (Simultaneous Authentication of Equals) and 802.11w Protected Management Frames, eliminating WPA2-PSK as a certified option. MLO introduces new key-derivation and roaming considerations: keys are bound to the MLD (multi-link device) rather than to a single radio, so misconfiguration can bypass per-link controls. Operators should pay attention to enterprise-grade authentication (802.1X/EAP), client driver maturity, and detection for downgrade or rogue-AP attacks specific to MLO.
How do you defend against Wi-Fi 7?
Defences for Wi-Fi 7 typically combine technical controls and operational practices, as detailed in the full definition above.
What are other names for Wi-Fi 7?
Common alternative names include: 802.11be, Extremely High Throughput Wi-Fi.
● Related terms
- network-security№ 1237
Wi-Fi 6E
An extension of Wi-Fi 6 (802.11ax) into the 6 GHz band, where the Wi-Fi Alliance mandates WPA3-only security for certified devices and networks.
- network-security№ 1250
WPA3
The third generation of Wi-Fi Protected Access, introducing SAE-based authentication, forward secrecy, and stronger protections for personal and enterprise Wi-Fi.
- attacks№ 943
Rogue Access Point
An unauthorised wireless access point connected to a network, either installed maliciously by an attacker or naively by an employee, that bypasses network security controls.