A system default is a built-in setting that takes effect automatically unless a user changes it. Defaults are used for many things, such as the default browser, email app, security prompts, file handlers, and privacy options. They reduce setup work, but they also shape user behavior because most people keep the preselected option.
In cyber security, system defaults matter because they can either strengthen or weaken a device by design. A secure default, such as automatic updates or blocked macro execution, lowers risk without requiring action from the user. A weak default, such as permissive permissions or a preselected app that the user never reviews, can create exposure at scale. Attackers often exploit default trust by relying on users to accept the obvious option, while defenders harden systems by changing defaults through policy, endpoint management, or secure baseline templates.