The Connectivity Standards Alliance has published three short documents on Zigbee 4.0 in October 2026: a Benefits one-pager on October 15, a Features Overview on October 21 and a Features Deep Dive on October 27. None of them is a new specification. They are the first plain summaries of what the alliance actually changed in Zigbee 4.0, and they say a lot about security and very little about when products will ship.
Security takes up most of the pages
The Deep Dive lists the security changes first. Dynamic Link Keys replace static or shared keys derived from install codes, so each device gets its own key that can be rotated after commissioning. After a device joins, the Trust Center (usually the coordinator) runs a mandatory "device interview", an assessment of the new device's security. Until that check passes, the device sits in a restricted mode in which it cannot control other devices or send sensitive commands.
Network maintenance is also signed now. Channel changes and PAN ID updates are authenticated, so a rogue device cannot fake one to cut the mesh off. APS frame counters can be resynchronised after a reset or power loss, which avoids the leave-and-rejoin cycle that battery sensors sometimes end up in. A Trust Center swap-out lets an installer replace the coordinator without rebuilding the network. The CSA names gateway hardware failure and cloud-to-cloud migration as the use cases.
Devices can also negotiate keys with SPEKE or a certificate-based exchange and set up link keys directly with peers that are not the Trust Center.
Range, Bluetooth and sleepy devices
Zigbee 4.0 can use sub-GHz bands, 800 MHz in Europe and 900 MHz in North America, on the same network as 2.4 GHz devices. Lower frequencies get through walls better, so a garden sensor or a detached garage is the obvious case. Zigbee Direct lets a phone onboard and control a device over Bluetooth Low Energy. The documents also mention batch commissioning for dense installations, better polling of sleepy end devices, standardised retries and protection against routing loops.
What it means for existing networks
The CSA says Zigbee 4.0 is backward compatible with Zigbee 3.0 devices. Existing products can move to 4.0 through an over-the-air update, but only where the hardware and platform resources allow it. The alliance does not say which chips qualify.
Most features are described as "largely optional". A product certified for Zigbee 4.0 can ship without sub-GHz radio, BLE onboarding or batch commissioning, so the logo alone will not tell a buyer what is inside. For manufacturers the CSA points to Rapid Recertification and FastTrack Recertification programmes and the Zigbee Unified Test Harness. For buyers there is still no date for certified Zigbee 4.0 products in shops.