Wi-Fi | 10 Mbit/s to multi-gigabit (802.11ax peaks at 9.6 Gbit/s) | High: mains or USB. Association and keep-alives are the biggest battery drain in a connected product | About 30 m indoors, 100 m line of sight (rule of thumb: walls and floors decide) | WPA2/WPA3, with 802.1X in enterprise. Getting credentials into a screenless device is the real work | Phones, laptops, and routers; reaches your cloud over the existing network | Low | Radio: FCC Part 15C with an FCC ID, ISED RSS-247, EU RED and CE. Wi-Fi Alliance certification if you use the name |
Bluetooth LE | 2 Mbit/s on paper, roughly 100 kbit/s with the GATT overhead in practice | Very low: around 10 mA while connected, microamps asleep. A coin cell runs a sensor for years | About 10 m practical, up to 100 m line of sight (rule of thumb) | LE Secure Connections (ECDH and AES-CCM) with pairing and bonding. The pairing flow is where devices get stolen | Phones and tablets natively. Anything else needs a hub that speaks both | Low | Radio: FCC Part 15C with an FCC ID, ISED RSS-247, EU RED and CE. Bluetooth SIG qualification is mandatory for the name |
 Thread / Matter | 250 kbit/s raw (802.15.4), tens of kbit/s of real payload | Low for end devices: sleepy battery sensors are the normal case. Mesh routers need mains | 10 to 30 m per hop; the mesh covers a home or a floor of a building | AES-128-CCM at the link layer, network keys, and Matter's device attestation and access control on top | Building and smart-home systems. Phones reach it through the Matter controllers in iOS, Android, and the big ecosystems | Low | Radio: FCC Part 15C with an FCC ID, ISED RSS-247, EU RED and CE. Thread Group certification, then CSA Matter certification for the product |
Zigbee | 250 kbit/s raw (802.15.4), tens of kbit/s of payload | Low for end devices; routers need mains | 10 to 30 m per hop; the mesh reaches a whole floor | AES-128 at the link layer with network and application keys; Zigbee 3.0 tightened the provisioning story | Building and HVAC products, mostly. Phones do not speak it | Low | Radio: FCC Part 15C with an FCC ID, ISED RSS-247, EU RED and CE. CSA certification for Zigbee products |
LoRa / LoRaWAN | 0.3 to 50 kbit/s, set by the spreading factor | Very low: a coin cell runs years between messages | About 2 km in a city, 10 km or more with line of sight (rule of thumb: the spreading factor decides) | LoRaWAN 1.1 uses AES-128 session keys and end-to-end encryption. 1.0 splits network and application keys, which is weaker | Building and plant sensing. Phones do not speak it, and you need gateway coverage | Low | Radio: FCC Part 15.247 for 902 to 928 MHz with an FCC ID, ISED, EU RED and CE, plus the regional duty-cycle and band-plan rules |
Cellular IoT (LTE-M / NB-IoT) | LTE-M up to about 1 Mbit/s in practice; NB-IoT around 60 kbit/s | Medium to high: transmit current is in amps, so the battery needs a buffer. Power-save modes buy years | Wherever the carrier reaches: kilometres to hundreds, with no local link budget | Carrier authentication plus your own TLS. SIM identity, eSIM provisioning, and SMS ports need care | Any site with coverage: buildings, vehicles, machines, remote sites. A phone does not speak to it directly | Medium | Licensed radio: FCC Parts 22, 24, and 27 certification, then carrier acceptance (PTCRB) and operator approval per carrier |
CAN bus | 10 kbit/s to 1 Mbit/s; CAN FD reaches 8 Mbit/s in the data phase | Powered from the vehicle bus, so there is no battery to design | About 40 m at 1 Mbit/s, 100 m at 500 kbit/s, 1 km at 50 kbit/s (rule of thumb) | None in the protocol: anything on the bus can inject frames, so security has to live in a gateway or an ISO/SAE 21434 design | Vehicle ECUs, OBD-II diagnostics, and OEM networks. Nothing else | Low | No radio certification. Road vehicles: E-mark and UNECE R10 for EMC, plus the OEM's automotive quality expectations |
RS-485 / Modbus | 9.6 kbit/s to 10 Mbit/s, usually 9.6, 19.2, or 115.2 kbit/s | Low to medium: the transceiver idles around 1 mA, and bus-powered devices exist | About 1.2 km at 100 kbit/s (rule of thumb: 10 m per 100 kbit/s) | None: an unauthenticated serial-to-Ethernet gateway is often the weakest link in the whole system | Building management, HVAC, meters, and factory PLCs. Modbus is the common language | Low | No radio certification. As a product in the US: FCC Part 15B emissions. EU: EMC Directive. Mains-powered parts also need safety approval |
Ethernet (incl. single-pair) | 100 Mbit/s to 10 Gbit/s; single-pair runs 10 Mbit/s to 2.5 Gbit/s | Mains or PoE: the switch can power the device, 15 W to 90 W a port | 100 m per copper segment. Single-pair Ethernet (10BASE-T1S) carries the link over one pair | None in the protocol: the switch's VLANs, 802.1X, and the physical port are the security | Building networks, plant floors, and cameras. No phone path without an adapter | Medium | No radio certification. As a product: FCC Part 15B or EU EMC. PoE parts also need safety approval; anything with a radio also needs RED or FCC 15C |
USB | 480 Mbit/s for USB 2.0; 5 to 20 Gbit/s for USB 3.2 and USB4 | Powered by the host: 5 V by default, and up to 240 W with USB Power Delivery | About 3 m for USB 2.0, 5 m for USB 3.2 | None in the protocol: a plugged-in device can act as the host, so it comes down to signed firmware and secure boot | Phones, laptops, and test equipment. A configuration and debug link, not a field network | Low | No radio certification. USB-IF certification for the logo, USB Power Delivery compliance above 5 V, and safety approval for mains-powered parts |