Choice architecture is the way an interface shapes decisions through layout, defaults, and prompts. In cyber security, it matters because users often make fast decisions based on what the screen emphasizes, not just on the text itself. A login page, permission dialog, or security warning can steer behavior by making one action easy and another harder.
Attackers use choice architecture in phishing pages, scam pop-ups, and fake consent screens to push victims toward unsafe clicks, credential entry, or approval of malicious access. Defenders use the same principle to improve safety: clear warnings, sensible defaults, multi-factor prompts, and easy ways to review or revoke permissions can reduce mistakes and limit account takeover. In practice, good security design lowers user friction for safe actions and increases it for risky ones, so the safer choice feels natural rather than forced.