Friction control is a security design technique that adds a small delay, confirmation step, or extra user action before a risky event can happen. The goal is not to block every threat outright, but to slow impulsive behavior and make the user think twice. In practice, that can mean hiding a suspicious image until it is intentionally revealed, asking for confirmation before opening a link, or requiring an extra check before sharing data.
In cyber security, friction control matters because many attacks rely on speed, trust, and habit. Phishing and QR-code lures work best when a person scans or clicks without inspection. By adding a deliberate choice, defenders can reduce accidental exposure and lower success rates for social engineering. It is a useful defensive layer in collaboration tools, email, and web workflows, but it does not replace filtering, access controls, or user training. It is a speed bump, not a wall.