Secure by default
Date created: 2026-10-21
Type: #type/reference
Area: #area/career
Keywords: #keyword/cybersecurity
Source: OWASP
Last updated:
A product should be in a secure default state via the settings without additional charge so a user doesn't have to secure it themselves.
Important
Most users will not learn an application's most secure configuration, and they should not be expected to.