What Entrepreneurs Can Learn from The Art of Invisibility
Dana had built her small consulting firm from a spare bedroom into a five-person team, and she took pride in moving fast. When a client contract needed signing during an airport layover, she used the terminal's open guest wifi to log into her banking app, then answered emails using the same password she had chosen back in college. Her assistant later mentioned, half-joking, that their shared project folder was open to anyone with the link, no login required. Dana laughed it off; the deal had closed and revenue was what mattered that quarter. Only when a vendor asked whether two-factor authentication protected the account holding client payment details did she realize how much of her business ran on convenience she had never questioned.
The whole book, compressed
This edition works through 4 core lessons — take them one at a time, not all at once.
What's different for your conditions
Tap whichever ones sound like you. Nothing here is sent or saved — it's just for your own noticing.
0 of 5 selected
The core lessons, applied to you
Passwords are your first line of defense
As a founder juggling banking, vendor logins, payroll, and client tools, you likely reuse passwords more than you would admit, because remembering unique ones feels like a distraction. Kevin Mitnick's central point in The Art of Invisibility is that weak or repeated passwords are the easiest way into a life or a business, and a founder's accounts often hold more combined value than any single employee's.
One shared password protecting a low-stakes signup and your business bank login turns a breach anywhere into a breach everywhere.
Use a password manager to generate a unique password for every account, and enable two-factor authentication on banking accounts.
Networks you don't own are not networks you control
Entrepreneurs live on the road, pitching from hotel lobbies and airport lounges, treating available wifi as a free utility rather than a shared, unsecured space. Mitnick's warning about shared networks applies here: getting online quickly can expose the client data and financial logins you spent years building trust around.
Logging into a banking or client portal on an open network makes your activity visible to others sharing that connection.
Treat public wifi as unsafe for anything sensitive, use a reputable VPN or a mobile hotspot for financial work, and confirm a network with staff first.
Your footprint is your business's footprint too
Every press mention and pitch deck builds your business, but it also scatters personal details, a hometown, travel dates, that someone could use to guess passwords or craft a convincing scam message. Mitnick's footprint concept is a reminder that visibility cultivated for marketing carries a cost most founders never add up.
Oversharing daily location and travel plans on social media tells anyone watching when your office or home is unattended.
Review your public bio and social profiles, and remove anything that could answer a security question.
Privacy as a habit your business grows into
None of this works as a one-time cleanup. As your business adds clients, tools, and employees, your exposure keeps changing, a new subscription here, a new hire's laptop there, so treating privacy as a habit matters more for a growing company than for almost anyone else. A short recurring review, a quarterly password check, keeps protection growing alongside the company instead of trailing behind it.
A founder's instinct is to remove friction wherever it slows a sale, and security habits are friction by definition. Strong authentication can feel like it works against the visibility and speed that make a small business appear responsive. The tension is that a slower login protects the same relationship that a fast, public presence helps you win. Most founders resolve this by concentrating strict habits on financial accounts while staying looser on low-stakes marketing.
Name one thing, honestly
- Which of your business accounts would cause the most damage to clients if it were compromised today? - Do you know which of your public posts a stranger could use to answer a security question? - Is your caution proportional to how much financial or client trust each account actually holds?
Good. Now look back at the "Try this" line under whichever lesson feels most connected to what you just wrote, and treat that as this week's actual assignment — not all 4 at once.
The practices from this edition
0 of 3 selected
Run this for seven days
Review your public bio and social profiles, and remove anything that could answer a security question.