RF Wireless World

Browse articles, tutorials, tools, and vendors.

BLE Pairing vs Bonding: Key Differences Explained

By RF Wireless Expert Team

Based on the definitions provided in the Bluetooth Core Specification, Pairing and Bonding are two distinct, sequential phases of Bluetooth security. While consumers often use the terms interchangeably, in Bluetooth Low Energy (BLE) engineering, they represent very different actions: one is about creation, and the other is about storage. Here is an explanation of the difference between the two concepts.

1. BLE Pairing: The “Key Creation” Phase

The Core Specification defines Pairing as “the process for creating one or more shared secret keys.” It is a real time, interactive security negotiation between two devices.

How pairing works:

When two BLE devices want to communicate securely for the first time, they must pair. During this phase, the devices:

  1. Negotiate Capabilities: They tell each other what kind of input/output features they have (e.g. “I have a screen and a keyboard,” or “I have no screen or buttons”).

  2. Authenticate (Association Models): Based on their capabilities, they use a specific method to verify each other and prevent Man-in-the-Middle (MITM) attacks. As per the specification, this could be Just Works (automatic), Numeric Comparison (user verifies a 6-digit number on both screens), Passkey Entry (user types a PIN), or Out of Band (using NFC to tap the devices together).

  3. Generate Keys: They use cryptographic algorithms (like Elliptic Curve Diffie-Hellman in LE Secure Connections) to generate temporary or session specific encryption keys.

The current connection is now encrypted and secure. However, if the devices disconnect, Pairing alone does not remember the keys. The next time they connect, they would have to repeat the entire pairing process.

2. BLE Bonding: The “Key Storage” Phase

The Core Specification defines Bonding as “the act of storing the keys created during pairing for use in subsequent connections in order to form a trusted device pair.”

How it works:

Bonding is an optional step that occurs immediately after a successful pairing process. If both devices support and agree to bond, they take the keys that were just generated and save them permanently in their secure memory (database). In BLE, the devices distribute and store specific keys, notably:

  • LTK (Long Term Key): Stored so the devices can instantly encrypt future connections without asking the user for a PIN or passkey again.

  • IRK (Identity Resolving Key): Stored so the devices can recognize each other in the future, even if they are using randomized, rotating MAC addresses for privacy (Resolvable Private Addresses).

The devices form a permanent “trusted relationship.” The next time they come into range of one another, they bypass the interactive pairing process, retrieve the stored LTK, and immediately establish a secure, encrypted connection seamlessly in the background.

Summary Comparison

FeaturePairingBonding
Official DefinitionThe process for creating shared secret keys.The act of storing keys for future use.
Core ActionAuthentication and Key Generation.Key Distribution and Storage.
TimingHappens First.Happens Second (After pairing is complete).
PersistenceTemporary (lasts only for the current connection session).Permanent (persists across disconnects and reboots).
User ExperienceMay require user interaction (typing a Passkey, confirming a 6-digit number, or tapping devices).Completely invisible to the user. Happens automatically in the background.
AnalogyShowing your ID and signing a contract at the front desk to get a visitor badge for the day.The front desk keeping your info on file and giving you a permanent VIP keycard for future visits.

References & Further Reading

  1. Bluetooth SIG : Bluetooth Core Specification Version 6.3, May 5, 2026.
  2. Bluetooth SIG : Bluetooth Technology Overview

Continue Learning Bluetooth Basic Concepts

Continue Learning Bluetooth Technology

Compare Bluetooth With Other Technologies

Keep Reading

Related Posts