Default behavior is the setting, response, or action a system uses before a person changes it. In software and devices, defaults cover things like passwords, network exposure, logging, permissions, and privacy options. They matter because most users never change every option, so the factory state often becomes the real operating state.
In cybersecurity, defaults can be a weakness or a defense. Unsafe defaults, such as open services, weak credentials, or broad access permissions, give attackers an easier first path into a system. Secure defaults reduce that risk by limiting exposure until an administrator deliberately enables more access. Defenders often look for default behavior when hardening systems, auditing cloud services, or testing whether a product is safe to deploy without manual tuning. The key idea is simple: whatever a system does automatically, before anyone intervenes, can shape its security far more than people expect.