Bluetooth Low Energy in IoT is the most frequently chosen short-range wireless technology where months or years of operation on a single battery matter. BLE (Bluetooth Low Energy) connects sensors, wearables, beacons, and controllers to a phone or gateway, offering low power consumption, universal support in smartphones, and a simple data model. In this guide we explain how Bluetooth Low Energy in IoT works, what layers it has (GAP, GATT), its range and parameters, and when it is worth choosing over Zigbee or Wi-Fi.
In short: Bluetooth Low Energy in IoT is a low-power 2.4 GHz radio protocol with a range of 10–100 m and consumption on the order of microamps in sleep, ideal for battery-powered sensors and communication between a device and a mobile app. Data is exchanged through the GATT profile, and the topology can be extended with Bluetooth mesh.
What is Bluetooth Low Energy in IoT?
Bluetooth Low Energy is a low-power variant of Bluetooth introduced in version 4.0 and developed through Bluetooth 5.4, designed for short, infrequent data transmissions rather than a continuous stream. In IoT, BLE plays the role of the "last meter" — it connects the edge device to a gateway or smartphone, which relays the data onward to the cloud.
The protocol operates in the 2.4 GHz ISM band across 40 channels (2 MHz each) and uses adaptive frequency hopping to avoid interference from Wi-Fi. As a result, a single device can communicate with a companion app, which is worth designing according to proven patterns — we described them in the article on building a BLE companion app in SwiftUI.
How does BLE work? The GAP and GATT layers
The BLE stack is divided into two key layers: GAP (Generic Access Profile) is responsible for discovery and establishing connections, and GATT (Generic Attribute Profile) defines the data structure. GATT is a hierarchy of services and characteristics, each with a unique UUID identifier.
In practice, a device broadcasts advertising packets (every 20 ms–10 s), and a client — most often a phone — subscribes to characteristics to receive notifications. This publish/subscribe model resembles lightweight telemetry protocols and scales well on memory-constrained microcontrollers, which we discuss in the guide to choosing an ESP32 or STM32 microcontroller.
- GAP — roles: broadcaster, observer, peripheral, central; it manages advertising and connections.
- GATT — data model: services → characteristics → descriptors; read, write, notify, indicate operations.
- ATT — the attribute layer that carries GATT operations.
- L2CAP — multiplexes channels and supports CoC mode for larger transfers.
What range and power consumption does BLE have?
The range of Bluetooth Low Energy is usually 10–30 m indoors and up to ~100 m in the open, and the Coded PHY mode (LE Long Range) from Bluetooth 5 increases it up to fourfold. Application throughput reaches 1–2 Mbps (2M PHY), which is enough for sensor telemetry, configuration, and firmware updates.
The biggest advantage is energy efficiency: in sleep mode a BLE chip draws single microamps, and peak consumption during transmission is usually 5–15 mA for a few milliseconds. As a result, a sensor on a CR2032 cell can run from several months to several years. We describe practical techniques for extending runtime in the article on energy efficiency in IoT.
BLE and other wireless technologies
Bluetooth Low Energy works well for short-distance point-to-point communication, but it does not replace long-range networks. Below is a brief comparison with popular alternatives used in IoT:
- Zigbee — a native, self-healing mesh topology for hundreds of nodes; more in the piece on the Zigbee mesh network.
- Wi-Fi HaLow — over a kilometer of range and higher throughput at the cost of power; details in the article on Wi-Fi HaLow (802.11ah).
- LoRaWAN / NB-IoT — kilometers of range for low-throughput telemetry, but without easy smartphone integration.
- BLE — best for pairing with a phone, wearables, beacons, and local configuration.
Bluetooth mesh and beacons — when to use them?
Bluetooth mesh is a profile that extends BLE with a many-to-many topology, in which messages are relayed between nodes, covering an entire building. The standard supports thousands of nodes and works well for lighting, HVAC control, and hotel systems, where a dense network of controllers is needed.
BLE beacons (iBeacon, Eddystone) are one-way transmitters broadcasting an identifier, used for micro-location, indoor navigation, and traffic analytics. In access-control solutions, BLE enables touchless opening — as in our Perrugi lock controlled from a phone.
Bluetooth Low Energy security in IoT
BLE security is based on LE Secure Connections pairing with an ECDH key exchange (the P-256 curve) and AES-128 encryption in CCM mode. A properly configured connection protects against eavesdropping and MITM attacks, but the default "Just Works" settings do not provide authentication.
In production IoT, it is worth using random private addresses (Resolvable Private Address) against tracking, validating input data in GATT characteristics, and maintaining a firmware update path. Regular patches delivered via OTA remove vulnerabilities discovered after deployment and are part of the lifecycle of every secure device.
When to choose BLE for an IoT project?
Choose BLE when a device must work directly with a smartphone, run for years on a small battery, and transmit small chunks of data over a short distance. It is the default choice for wearables, environmental sensors, beacons, consumer electronics, and the local configuration of industrial equipment.
Consider another solution if you need a range of many kilometers (LoRaWAN, NB-IoT), high video throughput (Wi-Fi), or a wide mesh network without a smartphone (Zigbee, Thread). In many deployments, BLE connects to a gateway that aggregates data and sends it to the cloud.
Frequently asked questions (FAQ)
What range does Bluetooth Low Energy have?
The typical range of BLE is 10–30 meters indoors and up to about 100 meters in the open. Bluetooth 5 with Coded PHY mode (LE Long Range) can increase the range up to fourfold at the cost of throughput, reaching hundreds of meters in favorable conditions.
How does BLE differ from classic Bluetooth?
Bluetooth Low Energy is a separate stack designed for short transmissions and long battery life, whereas classic Bluetooth (BR/EDR) handles continuous audio streams. BLE draws up to an order of magnitude less power and is a better fit for IoT sensors.
Is Bluetooth Low Energy secure in IoT applications?
Yes, provided you implement LE Secure Connections pairing (ECDH), AES-128 CCM encryption, and random private addresses. BLE security depends on the correct configuration of the application layer, device authentication, and OTA firmware updates that remove vulnerabilities.
Summary and key takeaways
Bluetooth Low Energy in IoT is a proven, energy-efficient short-range protocol that, thanks to the GAP and GATT layers, Coded PHY modes, and the Bluetooth mesh and beacon profiles, covers a huge range of applications — from wearables to control in hospitality. The key to success is the right choice of technology, secure pairing, and a well-thought-out firmware architecture.
At FSS we design complete BLE solutions end to end: custom hardware and PCB, firmware for ESP32/STM32, mobile apps, and a cloud backend. If you are planning a product based on Bluetooth Low Energy, explore our approach to IoT device design and let's talk about your deployment.