WiFi 7 (802.11be) Explained

What Is WiFi 7?

WiFi 7 is the marketing name for IEEE 802.11be - Extremely High Throughput (EHT). It represents the largest single leap in WiFi capability since the original 802.11n brought MIMO to consumer routers back in 2009. Where WiFi 6 focused on efficiency in crowded environments, WiFi 7 focuses on raw throughput and link reliability through a fundamentally different approach to how devices use spectrum.

The theoretical maximum data rate under 802.11be reaches 46.1 Gbps. That number comes from combining every feature the standard offers: 16 spatial streams, 320MHz channel bandwidth, and 4096-QAM modulation. No real-world device will hit that ceiling. But the technologies that produce that number - Multi-Link Operation, wider channels, and denser modulation - each solve real problems independently.

WiFi 7 operates across three frequency bands: 2.4GHz, 5GHz, and 6GHz. The 6GHz band, first introduced with WiFi 6E, becomes central to WiFi 7's design because it provides the contiguous spectrum needed for 320MHz channels. In regions where 6GHz spectrum is fully allocated for WiFi use, the standard can deliver its full potential.

Multi-Link Operation

Multi-Link Operation (MLO) is the defining feature of WiFi 7. Every previous WiFi generation forced a device to communicate with an access point on a single channel at a time. Even tri-band routers that supported 2.4GHz, 5GHz, and 6GHz simultaneously could only talk to each client on one band per transmission. MLO changes this.

With MLO, a single logical connection between a client and an access point can span multiple physical links simultaneously. A laptop connected to a WiFi 7 router might send data on both a 5GHz link and a 6GHz link at the same time. The standard defines three MLO modes:

Simultaneous Transmit and Receive (STR) allows the device to send on one link while receiving on another at the same time. This requires sufficient frequency separation between links to avoid self-interference.

Enhanced Multi-Link Single Radio (eMLSR) lets the device listen on multiple links but only transmit on one at a time. It picks whichever link has the best conditions for each transmission opportunity.

Non-Simultaneous Transmit and Receive (NSTR) handles cases where the links are too close in frequency for simultaneous operation. The device alternates between links but can still aggregate their capacity over time.

graph TD
    subgraph "WiFi 7 Multi-Link Operation"
        CLIENT[WiFi 7 Client] -->|Link 1 - 2.4GHz| AP24[AP Radio - 2.4GHz]
        CLIENT -->|Link 2 - 5GHz| AP5[AP Radio - 5GHz]
        CLIENT -->|Link 3 - 6GHz| AP6[AP Radio - 6GHz]
    end
    subgraph "MLO Modes"
        STR[STR - Simultaneous TX/RX] --> BEST[Best throughput]
        EMLSR[eMLSR - Listen all, TX one] --> BALANCED[Balanced power/speed]
        NSTR[NSTR - Alternating links] --> COMPAT[Close frequency compat]
    end
    subgraph "Legacy WiFi - Single Link"
        LCLIENT[Legacy Client] -->|One link only| LAP[Single AP Radio]
    end

Multi-Link Operation allows a WiFi 7 client to use multiple bands simultaneously - a first for WiFi

The practical benefit of MLO goes beyond raw speed. If one link experiences interference - say someone microwaves popcorn and kills the 2.4GHz band - traffic seamlessly shifts to the remaining links without dropping the connection. This reliability improvement matters more than the throughput gains for most users.

320MHz Channels

WiFi 6 maxed out at 160MHz channel bandwidth. WiFi 7 doubles that to 320MHz, but only in the 6GHz band where enough contiguous spectrum exists. A 320MHz channel in the 6GHz band provides roughly the same raw capacity as two bonded 160MHz channels in WiFi 6.

Wider channels mean more data per transmission, but they also mean fewer non-overlapping channels available in the band. In a dense apartment building where multiple WiFi 7 networks compete for 6GHz spectrum, 320MHz channels may cause more co-channel interference than narrower configurations. The standard includes puncturing - the ability to mark specific 20MHz sub-channels within a 320MHz channel as unavailable if they overlap with radar or other primary users. This lets the channel remain wide while respecting regulatory requirements.

graph LR
    subgraph "Channel Width Evolution"
        direction TB
        W11N["802.11n - 40MHz"] --> W11AC["802.11ac - 80/160MHz"]
        W11AC --> W11AX["802.11ax - 160MHz"]
        W11AX --> W11BE["802.11be - 320MHz"]
    end
    subgraph "320MHz Channel with Puncturing"
        S1[20MHz] --> S2[20MHz]
        S2 --> S3[20MHz]
        S3 --> S4["X Punctured"]
        S4 --> S5[20MHz]
        S5 --> S6[20MHz]
        S6 --> S7[20MHz]
        S7 --> S8[20MHz]
        S8 --> S9[20MHz]
        S9 --> S10[20MHz]
        S10 --> S11[20MHz]
        S11 --> S12[20MHz]
        S12 --> S13[20MHz]
        S13 --> S14[20MHz]
        S14 --> S15[20MHz]
        S15 --> S16[20MHz]
    end

WiFi 7 doubles maximum channel width to 320MHz and introduces puncturing for regulatory coexistence

4096-QAM

Quadrature Amplitude Modulation (QAM) determines how many bits each symbol carries. WiFi 6 used 1024-QAM, encoding 10 bits per symbol. WiFi 7 pushes to 4096-QAM, encoding 12 bits per symbol. That is a 20% increase in bits per symbol compared to WiFi 6.

The catch: 4096-QAM requires pristine signal conditions. The signal-to-noise ratio must be exceptionally high, which means the client needs to be close to the access point with minimal interference. At typical household distances, most traffic will fall back to lower QAM levels. The 4096-QAM improvement matters most for short-range, high-throughput use cases like wireless VR headsets or 8K video streaming from a media server in the same room.

Security Implications

WiFi 7 mandates WPA3 - there is no option to fall back to WPA2 on a compliant 802.11be access point. WPA3's Simultaneous Authentication of Equals (SAE) replaces the pre-shared key exchange, eliminating offline dictionary attacks against captured handshakes. This is a meaningful security improvement over the mixed WPA2/WPA3 transition mode that many WiFi 6 networks still run.

MLO introduces new considerations for network monitoring and security analysis. When traffic splits across multiple links, a passive observer monitoring a single frequency band captures only a fraction of the conversation. Reconstructing a complete session requires simultaneous capture on all active links - something that demands multi-radio monitoring hardware.

graph TD
    subgraph "MLO Security Challenge"
        TRAFFIC[Application Data Stream] --> SPLIT{MLO Traffic Splitter}
        SPLIT -->|Packets 1,3,5| LINK1[2.4GHz Link]
        SPLIT -->|Packets 2,6,8| LINK2[5GHz Link]
        SPLIT -->|Packets 4,7,9| LINK3[6GHz Link]
    end
    subgraph "Passive Monitor"
        MON[Single-band Monitor] -->|Sees only partial| LINK1
        MON2[Full MLO Monitor] -->|Needs 3 radios| RECONSTRUCT[Reconstructed Stream]
        LINK1 --> RECONSTRUCT
        LINK2 --> RECONSTRUCT
        LINK3 --> RECONSTRUCT
    end

MLO splits traffic across bands - passive monitors need multiple radios to reconstruct full sessions

Adoption in 2026

As of early 2026, WiFi 7 routers are available from all major manufacturers, but client support remains spotty. Most flagship smartphones and laptops from 2025 onward include WiFi 7 radios, but the vast majority of connected devices - smart home sensors, printers, security cameras, older laptops - still operate on WiFi 5 or WiFi 6. Full MLO support requires both the client and access point to support it, so the practical benefits roll out gradually as devices get replaced.

The 6GHz regulatory situation also varies by region. The United States and Europe have allocated the full 6GHz band for WiFi, but some countries restrict it to indoor use or allocate only a portion of the band. This affects whether 320MHz channels are practically available.

The BLEShark Nano Perspective

The BLEShark Nano operates on the 2.4GHz band with its ESP32-C3 radio. In a WiFi 7 MLO scenario, the Nano sees only the 2.4GHz link of any multi-link connection. This is still useful - the 2.4GHz link carries management frames, beacon broadcasts, and a portion of data traffic. But it means the Nano captures a slice of the full picture, not the complete session.

For network scanning and reconnaissance, the BLEShark Nano can identify WiFi 7 access points by their beacon information elements. The EHT capabilities element in beacons advertises MLO support, channel widths, and supported MCS rates. Even from a single-band vantage point, you can map which APs in your environment support WiFi 7 and what capabilities they advertise.

The mandatory WPA3 requirement in WiFi 7 also means that traditional WPA2 handshake capture techniques do not apply to pure 802.11be networks. The SAE handshake used by WPA3 is resistant to offline attacks, so passive monitoring of WiFi 7 networks yields less actionable security data than it did with WPA2 networks.