← Back to the feed

Wi-Fi 7’s WPA3 protections come with a compatibility catch

The Register ·

CableLabs, the broadband industry research body, has warned that efforts to make Wi-Fi 7 access points work with older devices are creating fresh compatibility headaches, and is urging hardware makers to prioritise support for the industry's fix. The issue stems from how Wi-Fi 7 hardware implements WPA3 security, which the Wi-Fi Alliance made mandatory on the 6 GHz band used by Wi-Fi 6E and Wi-Fi 7, while older bands relied on a transition mode to keep WPA2 devices connected. This matters because it could cause consumers who upgrade their router to suddenly find older gadgets unable to connect, generating confusion and extra support calls for network operators.

CableLabs says more than 23 billion Wi-Fi devices are in use globally, many running on ageing Wi-Fi 4 or Wi-Fi 5 hardware, particularly in home networks with a mix of client devices. The Wi-Fi Alliance's proposed remedy, WPA3-Personal Compatibility Mode (PCM), shifts security information into new Robust Security Network Override (RSNO) elements so access points can serve both legacy and modern clients, but it only works if client devices also support RSNO — a capability still rare in current hardware. Without it, devices get bumped down to Wi-Fi 6 and WPA2-Personal even if capable of more, so CableLabs is pressing chipset vendors and device makers, especially those producing low-cost and smart home kit, to adopt and test for RSNO support.

  • CableLabs flags Wi-Fi 7's WPA3 security causing legacy device connection failures
  • Fix is WPA3-Personal Compatibility Mode, requiring new RSNO element support
  • Many chipsets, especially cheap/smart home devices, don't yet support RSNO

New here? Start with this

Wi-Fi is the technology that lets phones, laptops and smart home devices connect to a router without cables. Newer Wi-Fi standards can use different radio bands, and Wi-Fi 6E and Wi-Fi 7 include access to the 6 GHz band. WPA2 and WPA3 are security systems that help protect these wireless connections.

Routers and devices do not all support the same standards or security features. The Wi-Fi Alliance, an industry group, requires WPA3 on the 6 GHz band, while a transition mode has helped older WPA2 devices connect on other bands. CableLabs, a broadband research body, says a proposed option called WPA3-Personal Compatibility Mode would let routers handle newer and older devices, but devices also need to support a newer feature called RSNO.

This matters because homes often contain a mix of newer and older equipment, including inexpensive smart home devices. If a router and a device do not support compatible features, the device may connect using an older standard or fail to connect. The issue affects hardware makers and network operators, as well as people upgrading their home Wi-Fi.

Both sides, in good faith

The strongest fair case each way — we don't pick a winner.

The case for

The Wi-Fi Alliance's mandatory WPA3 requirement represents a necessary security upgrade that protects billions of users across a fragmented ecosystem. Whilst the short-term compatibility challenges are real, the technical solution—WPA3-Personal Compatibility Mode with RSNO support—already exists and is sound. Hardware manufacturers and chipset vendors must prioritise implementation of this fix rather than requesting delays or exemptions. Decisive action on security improvements is justified when the means to resolve compatibility concerns are available and the stakes are this high.

The case against

The mandatory WPA3 requirement, though well-intentioned, has been implemented without adequate ecosystem readiness. Consumers upgrading to Wi-Fi 7 will encounter unnecessary compatibility failures with functioning older devices, whilst the proposed fix—PCM and RSNO support—remains rare in current hardware, creating a problematic gap between mandate and capability. A more thoughtfully coordinated transition, with manufacturer agreement and readiness testing before standards take effect, would serve consumers and network operators better than imposing requirements whilst the industry lacks the tools to meet them smoothly.

Software

Read the full article at the source →