Wi-Fi 6 vs 5G: How Should Businesses Choose?
| Technology Trends
Wi-Fi 6 vs 5G: compare tech, latency, security and cost to pick the right mix.
Introduction: Compare Scenarios, Not Just Speed
Businesses often ask: "Which is faster, Wi-Fi 6 or 5G?" The question itself points in the wrong direction. Speed is only one dimension, and it depends heavily on deployment, devices and environment. The right questions are: do your devices move? How large is the area? How critical is the connection? How strict are the security requirements? What does the budget structure look like?
The short answer of this article: most Hong Kong businesses do not need to pick one. Use Wi-Fi 6 for indoor, fixed, high-density scenarios; use 5G for mobility, outdoor coverage and backup; let the two divide the work under one set of network policies. The sections below start with the technology, then move through a comparison table, security, the Hong Kong situation, application scenarios, and finally a decision framework and hybrid-architecture rollout steps.
What Is Wi-Fi 6?
Wi-Fi 6 is IEEE 802.11ax. The Wi-Fi Alliance began Wi-Fi 6 certification on 16 September 2019, and Wi-Fi 6E certification on 7 January 2021. Wi-Fi 6 operates on 2.4 GHz plus 5 GHz; Wi-Fi 5 (802.11ac) operates mainly on 5 GHz.
Wi-Fi 6E: An Extension to 6 GHz, Not a New Generation
Wi-Fi 6E is not a new generation of protocol. It is the same 802.11ax technology extended to the 6 GHz band. Devices that support Wi-Fi 6 but not 6E cannot use 6 GHz. The advantage of 6 GHz is less interference from older devices; the disadvantage is that higher frequencies generally mean weaker wall penetration and shorter coverage, and devices fall back to 5 GHz or 2.4 GHz outside 6 GHz range. The 6 GHz band must use WPA3.
Six Core Technologies: What Problem Each One Solves
- OFDMA (Orthogonal Frequency Division Multiple Access): splits one channel into smaller Resource Units so multiple devices can be served at once, instead of each device taking turns using the whole channel. It reduces waiting and latency when many devices are online at the same time, which matters most in high-density settings such as offices, classrooms and retail spaces.
- MU-MIMO (Multi-User, Multiple Input Multiple Output): lets an AP send and receive different data streams to multiple devices simultaneously. Wi-Fi 5 supported downlink MU-MIMO only; Wi-Fi 6 adds uplink MU-MIMO, further strengthened in Release 2. The standard supports up to 8x8 uplink and downlink MU-MIMO. That keeps efficiency up when upload demand is high, for example video conferencing, cloud backup and surveillance uploads.
- 1024-QAM: a higher-order modulation scheme carrying 10 bits per symbol (Wi-Fi 5's 256-QAM carries 8 bits). Where signal is strong and interference is low, the same bandwidth carries more data; where signal is weak, the highest modulation level may not be usable.
- BSS Coloring: tags each Basic Service Set (BSS) with a "colour", so devices can tell apart transmissions on the same channel that belong to different networks, reducing co-channel interference. In offices and shopping malls with many APs and neighbouring networks, that means fewer collisions and better overall efficiency.
- TWT (Target Wake Time): lets devices negotiate scheduled wake times with the AP and sleep while idle, instead of constantly searching for the network. It saves power, which matters for IoT sensors and battery-powered devices; it matters less for typical laptops and phones.
- 160 MHz channels: Wi-Fi 6 supports 20 / 40 / 80 / 80+80 / 160 MHz channel widths. Wider channels mean higher theoretical throughput, but fewer usable channels and greater sensitivity to interference. Enterprise deployments need channel planning; 160 MHz should not simply be switched on everywhere.
Theoretical 9.6 Gbps vs Real-World Speed: Why the Gap
The theoretical maximum rate is about 9.6 Gbps, under the conditions of a 160 MHz channel plus 8 spatial streams — the standard's upper-limit combination, not the speed a single AP or a single device will normally reach. Real-world deployed rates must be stated as "depending on environment": one vendor support document states that, on a broadband plan of 1 Gbps or above, Wi-Fi 6 real-world downloads run about 600–800 Mbps and Wi-Fi 6E about 1–1.6 Gbps, provided both router and device support the relevant standard; a third-party roundup puts most Wi-Fi 6 APs at about 500 Mbps–1 Gbps under normal conditions; and in enterprise deployments, real application throughput (goodput) is generally about 50%–65% of the link rate shown on the device, because of half-duplex operation, MAC overhead, CSMA/CA and similar factors. The conclusion: never write "Wi-Fi 6 speed is 9.6 Gbps" without conditions. Real speed depends on devices, distance, interference, channel width and upstream broadband, and is generally far below the theoretical value.
What Is 5G?
5G is a mobile communications standard developed by 3GPP. The first phase, Release 15, focused on eMBB (Enhanced Mobile Broadband) and initial 5G NR deployment; the second phase, Release 16, added URLLC, V2X, unlicensed-spectrum operation and more complete functionality. 5G is not a single frequency but an architecture spanning multiple bands: FR1 (Sub-6 GHz, below 6 GHz) and FR2 (mmWave, millimetre wave, 24–100 GHz).
Sub-6 vs mmWave: A Coverage-versus-Capacity Trade-off
| Sub-6 GHz (FR1) | mmWave (FR2, 24–100 GHz) | |
|---|---|---|
| Coverage | Broader, up to kilometre scale; stronger wall penetration | Shorter, generally only hundreds of metres to under a mile; weak wall penetration, easily affected by buildings and rain |
| Capacity / rate | Medium to high; mid-band can reach hundreds of Mbps | Very high; can reach multi-Gbps levels depending on deployment |
| Typical use | Wide-area coverage, suburban / urban general mobile service | High-density hotspots, private networks, specific scenarios needing very high capacity or very low latency |
The above is a general description, not a Hong Kong measurement guarantee. In general, Sub-6 suits wide-area coverage and mmWave suits high-density hotspots and specific private-network scenarios; the trade-off is between coverage and capacity.
Three Application Scenarios: eMBB, URLLC, mMTC
- eMBB (Enhanced Mobile Broadband): high throughput, for example HD streaming, large file downloads and AR.
- URLLC (Ultra-Reliable Low-Latency Communications): time-sensitive applications that cannot tolerate interruption, for example factory automation, remote operation and smart grids.
- mMTC / mIoT (Massive Machine-Type Communications / Massive IoT): large numbers of low-power sensors, for example smart metering and logistics tracking.
Network Slicing: Not Automatic With a SIM Card
Network slicing carves multiple logically isolated virtual networks out of one physical network, with each slice configured for the resource needs of a specific application or service. Slices are identified by S-NSSAI, which is an SST (Slice/Service Type) plus an optional SD (Slice Differentiator). Standardised SST values are: SST 1 = eMBB, SST 2 = URLLC, SST 3 = MIoT / mMTC, SST 4 = V2X, SST 5 = HMTC, SST 6 = HDLLC. The key point: slicing is a 5G core-network capability, not something a business automatically gets by buying a SIM card. To use slicing, a business generally needs the operator to provide the corresponding service or needs to deploy a private network, with an SLA in place.
Private 5G: When Is It Needed?
A private 5G network is a dedicated local mobile network deployed within a specific site, such as a factory, warehouse, port or campus, providing dedicated and secure connectivity. A key architectural feature: the 5G core network can place the User Plane Function (UPF) on site, so OT (Operational Technology) traffic stays local instead of hair-pinning through the wide-area network, while the control plane can be managed centrally. Non-Public Networks (NPN) were formally defined in 3GPP Release 16. Typical uses include manufacturing (robots, AGVs, VR remote devices, closed-loop manufacturing), logistics and warehousing (AGVs, AR remote experts, real-time asset tracking, automated logistics control), and hotels and venues (staff plus visitor applications, indoor and outdoor monitoring). In Hong Kong, private network arrangements are generally provided through mobile network operators; the specific spectrum, service model and charges should be confirmed with the operator. That sentence is practical advice to verify with the operator, not a verified regulatory conclusion.
Wi-Fi 6 vs 5G Comparison Table
| Dimension | Wi-Fi 6 (802.11ax) | 5G (public 5G / private 5G) |
|---|---|---|
| Standard / body | IEEE 802.11ax; Wi-Fi Alliance certification (from 2019) | 3GPP Release 15 / 16 onwards; operator networks |
| Spectrum | Unlicensed spectrum (2.4 / 5 GHz; 6E adds 6 GHz), no spectrum licence fee | Mainly licensed spectrum (Sub-6 plus mmWave), requires operator / licence arrangements |
| Coverage (single node) | Low power, mainly indoor; a single AP is generally thought of in terms of tens of metres indoors, with actual results depending on AP power, band, walls and interference | Higher power, broader coverage; a single base station / small cell can cover a larger area, indoors and outdoors; mmWave coverage is short |
| Capacity / density | OFDMA plus MU-MIMO excel at high-density fixed devices; one AP serves many devices, with performance affected as concurrent devices increase | Excels at wide areas plus moving devices; network slicing can allocate resources per application; mMTC is designed for massive IoT |
| Latency | Real-world ranges vary by source, see below; affected by interference, load and backhaul | Real-world ranges vary by source, see below; can be lower under URLLC configuration, but that needs specific deployment conditions |
| Mobility / handover | Devices roam between APs and must re-associate; enterprise controllers and roaming optimisation can improve this, but it is inherently not the seamless cross-base-station handover of a mobile network | Designed for seamless handover between base stations, suitable for devices on the move (AGVs, vehicles, outdoor staff) |
| Security / authentication | WPA3; enterprise mode can use 802.1X / RADIUS plus directory identity | SIM / eSIM authentication; AKA / EAP-AKA; SUCI conceals user identity; operator-grade encryption |
| Cost structure | Mainly CAPEX: APs, cabling, PoE switches, controllers / management platforms; no spectrum fee, no per-device monthly fee (except management subscriptions) | CAPEX plus OPEX: base stations / small cells, core network, SIMs, data plans / private network service fees, operator SLAs; private networks have higher upfront investment |
| Deployment complexity | Relatively simple: can upgrade APs over the existing LAN / cabling; enterprise IT teams can generally manage it themselves | Relatively complex: needs spectrum / operator coordination, base-station planning, core network, SIM management; private networks usually need operator or integrator assistance |
| Hong Kong reality | Businesses can deploy it themselves; suits the vast majority of indoor scenarios | Public 5G coverage is broad, but indoor performance varies by building; private networks are generally arranged through operators, not something a business achieves by obtaining spectrum on its own |
| Best fit | Offices, schools, retail stores, indoor high-density scenarios with mainly fixed devices | Factory / warehouse mobile equipment, outdoor / large-area sites, temporary sites, branch backup, critical applications with high mobility / reliability requirements |
How to read this table: every row needs a "depending on deployment" qualifier. Coverage, latency and capacity are all affected by deployment method, devices, interference and backhaul; never treat the table as a guarantee. Latency needs particular care: the typical ranges given by different sources are themselves inconsistent. One source puts Wi-Fi 6 at about 5–10 ms and 5G at about 10–20 ms (lower in URLLC mode); another puts private 5G below 5 ms and Wi-Fi 6 at about 10–30 ms. Latency on both sides is affected by deployment method, backhaul, load, devices and interference. "5G is always faster than Wi-Fi 6" and "Wi-Fi 6 is always faster than 5G" are both wrong. The very low latency of URLLC needs specific configuration, edge UPF, private networks or slicing and similar conditions; it is not the default behaviour of public 5G.
Security: WPA3 vs SIM Authentication
WPA3: SAE, Forward Secrecy, 192-bit Enterprise Mode
WPA3 was announced by the Wi-Fi Alliance in January 2018, replacing WPA2; certification began in June 2018; and from July 2020, Wi-Fi CERTIFIED devices must support WPA3. WPA3-Personal uses SAE (Simultaneous Authentication of Equals, the Dragonfly handshake) instead of the WPA2 PSK exchange, resists offline dictionary attacks, and provides forward secrecy (forward secrecy), meaning that even if the password later leaks, past communications are not thereby decrypted. WPA3-Enterprise provides the equivalent of 192-bit encryption strength (AES-256 GCM plus SHA-384 HMAC); WPA3-Personal requires a minimum of CCMP-128 (AES-128 CCM); WPA3 does not allow TKIP. Enhanced Open / OWE provides Opportunistic Wireless Encryption for password-free open networks, so guest networks no longer transmit in plaintext. PMF (Protected Management Frames, IEEE 802.11w) is mandatory under WPA3, preventing deauthentication / disassociation management-frame spoofing attacks. In enterprise practice, WPA3-Enterprise is generally combined with 802.1X / RADIUS plus an enterprise directory identity; SSID / role / VLAN segmentation can isolate IoT devices from the staff network.
5G: SIM / eSIM, AKA, SUCI
5G authentication uses SIM / eSIM with AKA (Authentication and Key Agreement) / EAP-AKA. Users do not need to remember a password; identity is bound to the SIM. For privacy, SUCI (Subscription Concealed Identifier) encrypts the user's permanent identity, reducing the risk of identity eavesdropping and tracking. For device management, the operator / private-network manager can use SIM / eSIM to set which networks, slices and service levels a device may access; eSIM profiles can be issued by QR code. The SIM model has an advantage for large numbers of IoT devices and scenarios needing strict device identity management; but it also means devices must support SIM / eSIM, and the management process depends on the operator / private-network core.
A Fair Comparison: Both Are Secure; Deployment Is the Deciding Factor
Do not write "5G is absolutely more secure than Wi-Fi 6", or the reverse. Wi-Fi 6 plus WPA3-Enterprise plus correct segmentation plus regular updates already meets the indoor security needs of the vast majority of businesses. The 5G SIM model has structural advantages in device identity management, re-authentication during cross-base-station roaming, and privacy protection, suiting mission-critical work, moving devices and large-scale IoT. The real risk on either side is usually not the protocol itself but deployment mistakes: weak passwords, shared PSKs, missing segmentation, unpatched firmware, unencrypted open networks, messy SIM management, and similar errors.
Hong Kong Reality: Broad Coverage Does Not Mean Good Indoor Performance Everywhere
Public 5G Coverage
According to OFCA's OFCA Trading Fund Report 2024/2025, 5G coverage has reached all densely populated areas, major shopping centres and MTR stations; there are about 8.8 million 5G users, over 116% of the population (one person holding more than one subscription is normal — do not read this as every person having 5G). Fixed broadband household penetration has remained above 97%, with about 87% of households connected to fibre networks; over 71% of households use high-speed broadband of 1 Gbps or above.
Coverage does not equal indoor performance, however. An Ookla report citing OFCA notes that, as at the end of March 2025, 5G population coverage exceeded 99%, but that indicator only reflects outdoor detectability, not indoor network performance. Mid-band / high-band 5G attenuates severely through reinforced concrete and tinted low-emissivity glass; within the same building, performance across different operators differed by up to 80 times (comparing the best and worst of 16 surveyed sites). Hong Kong residents spend about 85% of their daily lives indoors. The lesson: "Hong Kong 5G coverage exceeds 99%" does not mean "every office has good indoor 5G". Businesses should not decide on coverage figures alone; they must test on site (indoor signal, speed, latency, and performance across different operators).
Spectrum Arrangements
OFCA administratively assigned 1,200 MHz of spectrum in the 26 / 28 GHz bands to mobile network operators in August 2024, for providing 5G or more advanced mobile services. OFCA held two spectrum auctions in November 2024: 110 MHz of spectrum in the 850 / 900 MHz and 2.3 GHz bands, and the first-ever 300 MHz of spectrum in the 6 / 7 GHz bands; the 6 / 7 GHz spectrum can be used for existing 5G and future 6G mobile services, and was assigned in March 2025. The Telecommunications (Amendment) Ordinance 2024 was passed by the Legislative Council in February 2024 and took effect on 1 October 2024, applying to specified buildings with building plans approved from 1 April 2025: operators may enter reserved space in new and redeveloped buildings (commercial, industrial, residential, hotel) to install and maintain mobile communications facilities, helping to further extend indoor coverage.
Qualitative observation: high public 5G subscription volumes and high fibre penetration mean most businesses already have "fixed broadband plus Wi-Fi" as their indoor mainstay; 5G more often plays a mobile, backup, outdoor / temporary-site role; private networks are targeted deployments for specific industries (manufacturing, logistics, venues), not a universal default.
Application Scenarios: Which Technology for Which Scenario
Offices: Wi-Fi 6 First
Devices are mostly fixed or semi-fixed (laptops, phones, printers, meeting equipment) and high in density; OFDMA plus MU-MIMO handle many devices online at once; CAPEX is controllable and the existing LAN can be upgraded; WPA3-Enterprise plus VLAN segmentation is sufficient. Points to watch: meeting rooms and open-plan areas need AP density and channel planning; guest networks should use Enhanced Open / a separate SSID plus isolation; do not switch on 160 MHz across the whole site without planning. The 5G role: mobile data supplement for senior / mobile staff, or branch backup. For office wireless planning, see our Wi-Fi solution; for planning wired networks together with wireless, see office network.
Factories / Warehouses: Consider Private Networks for Mobile Equipment
For mobile equipment and critical control, consider private 5G; for fixed workstations and surveillance, Wi-Fi 6 works as a complement. Why: AGVs / AMRs keep moving and need seamless cross-base-station handover; closed-loop control, robot vision and similar applications have high latency and reliability requirements; a private network plus local UPF keeps OT traffic on site; SIM identity management suits large numbers of industrial devices. Points to watch: private-network upfront investment, spectrum / operator coordination and the device ecosystem (whether devices support the required bands / SIM) must all be confirmed in advance; do not assume every industrial device supports 5G.
Retail: Wi-Fi 6 First, 5G for Backup and Temporary Scenarios
Stores cover a limited area, with devices fixed or staying briefly; Wi-Fi deploys fast at low cost; guest Wi-Fi can be part of customer service; POS, scanning and stock devices have low mobility requirements. The 5G role: branch backup (keeping till / payment running when fixed broadband fails), temporary pop-up stores (using 5G FWA plus Wi-Fi where there is no fixed broadband), and temporary coverage for outdoor queues / markets. Points to watch: the guest network must be isolated from the POS / back-office network; never put POS on an unencrypted network shared with customers.
Schools: Wi-Fi 6 First
High-density classroom devices (tens of devices online at once per class) are exactly where OFDMA / MU-MIMO excel; TWT helps battery-powered devices; WPA3-Enterprise plus student / staff / visitor segmentation fits management needs. The 5G role: outdoor campus, sports grounds, school buses / outdoor learning and similar mobile scenarios, or temporary capacity for large events. Points to watch: critical applications such as examinations and e-learning platforms need reserved capacity and QoS; 24-hour settings such as hostels need management policy, not just technology.
Outdoor / Temporary Sites: 5G FWA plus Wi-Fi
There is no fixed broadband, deployment time is short and coverage is wide; a 5G CPE (customer premises equipment) connects to the internet over 5G and then distributes connectivity to on-site devices over Wi-Fi — the FWA model. Points to watch: test signal on site at temporary venues (especially indoor / obstructed sites); confirm data usage, speed caps and operator plan terms in advance; do not assume "5G is always faster than fixed broadband".
Branch Backup: Fixed Broadband plus Wi-Fi 6 First, 5G as Backup
When fixed broadband fails, a 5G router can fail over automatically, keeping till, VPN, cloud systems and other critical connections running; dual SIM adds another layer of operator redundancy. Points to watch: backup must be tested in practice (disconnection, then 5G takeover, then fallback when fixed broadband recovers) — do not rely on the spec sheet alone; backup bandwidth must be calculated against critical application needs, not assumed from "having 5G equals having backup".
Decision Framework: Ask Five Questions First
- Do the devices move? Fixed / semi-fixed points to Wi-Fi 6 first; continuously moving devices (AGVs, vehicles, outdoor staff) point to 5G / private networks first.
- How large is the area? A single indoor floor points to Wi-Fi 6; across floors / buildings / large outdoor areas points to 5G / hybrid.
- How critical is it? General office / visitor use means Wi-Fi 6 is sufficient; if an outage stops production or stops tills, consider 5G backup or a private network plus SLA.
- How strict are the security requirements? General enterprise segmentation points to WPA3-Enterprise; strict device identity, large-scale IoT and critical OT point to evaluating the SIM model / private networks.
- What is the budget structure? Acceptable one-off investment with no monthly fee points to Wi-Fi 6; acceptable monthly / service fees with a need for an operator SLA points to 5G / private networks.
| Situation | Suggested direction |
|---|---|
| Office / school / retail store, many devices but fixed | Wi-Fi 6 first |
| Factory / warehouse with AGVs / robots needing seamless cross-area movement | Evaluate private 5G (through an operator), Wi-Fi 6 as fixed-area complement |
| Outdoor / temporary site, no fixed broadband | 5G FWA / 5G router plus local Wi-Fi |
| Branch worried about fixed-broadband outages | Fixed broadband plus Wi-Fi 6 first, 5G as backup (test the switchover) |
| Limited budget, need fast rollout | Wi-Fi 6 first (simple deployment, no spectrum fee) |
| Mission-critical, needs guaranteed latency / reliability plus SLA | Evaluate private-network / operator options; do not rely on assumptions about public Wi-Fi or public 5G alone |
| Not sure | Do a site survey plus on-site testing first; do not decide on coverage figures alone |
How the Hybrid Architecture Lands: Wi-Fi 6 Indoors, 5G Outdoors
The principle: not "either-or" but "division of labour". Indoor fixed high-density use runs on Wi-Fi 6; outdoor / mobile / backup runs on 5G; both are managed under one core network policy (VLAN / segmentation, identity, QoS).
- Site survey: map the floor plan, device counts, movement paths, critical applications, and existing cabling / PoE / switch capacity.
- On-site testing: Wi-Fi signal plus indoor 5G signal (different operators) plus speed plus latency; do not trust coverage maps alone.
- Segmentation design: separate staff / guest / IoT / POS / OT into SSIDs / VLANs / slices or APNs; isolate guests from internal systems.
- Security design: WPA3-Enterprise plus 802.1X / RADIUS; SIM / eSIM management on the 5G side; firmware updates and regular reviews on both sides.
- Backup testing: simulate a fixed-broadband outage and verify actual 5G failover switchover time and whether critical applications stay up.
- Monitoring and operations: AP / base-station / CPE status, device counts, channel interference, data usage, anomaly alerts; define who is responsible (internal IT or supplier).
- Regular review: re-evaluate capacity and cost when device counts grow, sites change or operator plans change.
Convergence trend: the industry direction is 5G and Wi-Fi converging rather than replacing each other, including unified management, SD-WAN plus edge computing, and 5G–Wi-Fi roaming and authentication interworking. These are industry directions; do not read them as standard features Hong Kong businesses can buy off the shelf today.
Common Misconceptions
- Is Wi-Fi 6 always faster than 5G? Or is 5G always faster than Wi-Fi 6? Wrong. Which is faster depends on deployment, devices, environment, backhaul and load; there is no blanket answer.
- Is 9.6 Gbps the speed we will actually get? Wrong. 9.6 Gbps is a theoretical ceiling under specific conditions (160 MHz plus 8 spatial streams); real-world speeds are generally far below the theoretical value.
- Does using 5G automatically bring network slicing and extremely low latency? Wrong. Slicing and URLLC-level latency need specific configuration, edge UPF, private-network or slicing arrangements plus an SLA; they are not default public 5G behaviour.
- Does 5G coverage above 99% mean indoor performance is always good? Wrong. The coverage indicator only reflects outdoor detectability; indoor performance varies with building structure, materials and operator, and must be tested on site.
- Does buying Wi-Fi 6 APs automatically upgrade the whole company? Wrong. Devices, cabling, channel planning and backhaul all have to match before Wi-Fi 6 delivers its benefits.
Conclusion: What to Do Next
For most Hong Kong businesses, the practical answer is a hybrid architecture: Wi-Fi 6 indoors as the mainstay, with 5G covering mobility, outdoor and backup roles. The action list for next steps: site survey, on-site testing, segmentation design and backup testing. If you need help with a Wi-Fi survey or a 5G backup assessment, contact the team for an evaluation based on your site environment before finalising a plan.