The core idea

Data private, behaviour public.

An object hides its internal state and exposes only a small set of methods. Callers use the methods; they can't reach in and corrupt the data.