Bootstrapping is the first stage of preparing a new system for use. It includes the initial steps that get hardware and software into a usable state, such as entering first credentials, selecting settings, enabling connectivity, and establishing the first trusted configuration. In practice, bootstrapping often happens before normal remote administration is available, so it may depend on direct physical access, a local keyboard, a console cable, or a temporary setup interface.
In cyber security, bootstrapping matters because the earliest configuration choices often define the system’s trust model. If initial access is weak, an attacker who reaches the device during setup may plant malicious settings, add unauthorized accounts, or lock in insecure defaults. Defenders focus on secure defaults, authenticated enrollment, and tightly controlled physical access during first boot. Bootstrapping is common in devices like routers, servers, and single-board computers, where the first successful setup determines how safely the system can be managed afterward.