Every Password Used in the Harry Potter Series

J.K. Rowling had a problem she never talked about in interviews: passwords. Specifically, the sheer administrative burden of running a school where every dormitory, every office, every secret passage, and every enchanted parchment required its own verbal key. By the time the series ended, she had invented at least thirty-two of them – and that’s only counting the ones that made it into the books.

The passwords form a quiet but revealing thread running through all seven novels. Gryffindor tower alone burned through sixteen of them, which works out to roughly two password changes per school year. Some of these are dignified – “Fortuna Major” has the ring of something you’d carve above a doorway. Others are harder to explain. “Tapeworm” was apparently considered suitable gatekeeping for a community of teenage wizards. “Abstinence,” used in Harry’s sixth year, had the unfortunate distinction of being, by some distance, the most pointed password the Fat Lady ever had to announce.

And then there’s Snape. When he inherited the Headmaster’s office after Dumbledore’s death, he set the gargoyle password to “Dumbledore.” Harry discovers this by blurting it out instinctively when he needs to access the Pensieve. It is arguably the most emotionally loaded password in the history of fiction, and Rowling drops it in a single line without comment.

What follows is the complete catalog: every password, access code, verbal key, and magical incantation used to open something locked in the Harry Potter series – from Hogwarts dormitories to Parseltongue-sealed chambers, from a brass eagle door knocker that asks philosophy questions to a painted pear you have to tickle.

Caput Draconis

The very first password Harry Potter ever hears at Hogwarts. Percy Weasley speaks it to the Fat Lady on the evening of September 1st – Harry’s first night at the school – while escorting the new first-years to Gryffindor tower. It translates from Latin as “dragon’s head,” which, for a house represented by a lion, is at minimum a curious choice, and possibly just evidence that whoever set the passwords that year had been dipping into a Latin dictionary at random.

What makes this password memorable beyond its chronological position is what it signals about the world Harry has just entered. Moments before, he watched a platform materialize at King’s Cross and a train carry him into the Scottish Highlands. Now a painted woman in a portrait is evaluating whether he has the right to enter his own bedroom. Caput Draconis. The door swings open. This is how things work here.

The Philosopher’s Stone, Chapter 7. Page 130 in the American edition. The first of thirty-two. Harry will spend the rest of the series discovering that the wizarding world runs on this principle – that access is granted through the right words spoken to the right listener at the right moment, and that knowing the words is what separates those who belong from those who don’t. He starts here, in a corridor on the seventh floor, learning his first one.

Pig Snout

The second Gryffindor password, and by a wide margin the least imposing. Where “Caput Draconis” at least carried some Latin mystery, “Pig Snout” has the energy of a name Fred or George Weasley might have suggested as a joke that somehow got approved. It appears three times in Philosopher’s Stone – pages 156, 161, and 179 in the American edition – which means it was in use for a good stretch of Harry’s first year, well past the glamour of September.

There’s no stated reason for the change from Caput Draconis. Password rotations at Hogwarts happen without announcement, which is both realistic and slightly cruel to anyone who has been away for a Quidditch match. Harry uses it without comment each time, which suggests he’d already accepted, fairly early in his magical education, that the portal to his dormitory might at any moment be guarded by a phrase about farmyard anatomy.

“Pig Snout” is not a phrase that suggests Hogwarts at its most majestic. It is, however, the password that greeted Harry each time he came home after something extraordinary in his first year – after detention in the Forbidden Forest, after the full weight of what Voldemort’s return might mean began to settle. There’s something almost comforting about it. The door doesn’t require grandeur. It just requires the right two words.

Wattlebird

Wattlebird is one of the more elusive entries on this list, and that’s before you try to look it up. The password appears in Chapter 5 of Chamber of Secrets – but only in UK and Australian editions of the book. American readers, depending on their edition, may find it on a different page or not at all, which has created some low-grade scholarly confusion among fans who like their canonical passwords neat and consistent.

The wattle bird is an Australian honeyeater – a species found across southern Australia, known for the yellow wattles that hang from its face. This may explain why the password survived more robustly in southern hemisphere printings, or it may simply be one of the small regional edits that accumulated as the books were adapted for different markets. In any case, it appears to have been the first password in use at the start of Harry’s second year, spoken by or overheard near a prefect as students settled back into Hogwarts life.

Its inclusion matters because it fills a gap. Without Wattlebird, Chamber of Secrets would be the only book in which Gryffindor tower appears to have no password until the Polyjuice Potion business demands one. Rowling wasn’t in the habit of architectural oversights, which is why the edition-variant entry still earns its place here.

Fortuna Major

The first Gryffindor password of Harry’s third year, and the one that draws the most explicit attention in the text. The Fat Lady sings it operatically in Chapter 6 of Prisoner of Azkaban before finally admitting students – a moment that manages to be both charming and mildly insufferable, which is rather the Fat Lady’s specialty. Students who arrive at the portrait hole mid-performance simply have to wait.

“Fortuna Major” is Latin for “greater fortune,” and it comes from medieval geomancy, where it referred to one of sixteen figures representing positive outcomes. Whether whoever set the password knew this or simply liked the sound of it is not established. Either way, it has more grandeur than Pig Snout and more classical weight than anything Sir Cadogan would later bring to the role.

The password is in use at the opening of the year, before Sirius Black’s name had entered the story with its full weight, before the Fat Lady’s portrait was slashed and Sir Cadogan installed as emergency cover. Prisoner of Azkaban is the book in which more passwords are recorded than any other in the series – partly because Sir Cadogan’s rotating roster becomes a plot point of its own. Fortuna Major is the calm before that particular storm.

Scurvy Cur

Prisoner of Azkaban’s subplot about the Fat Lady’s portrait being slashed is genuinely alarming, but it produces, as a side effect, one of the more memorable password regimes in Gryffindor history. With the Fat Lady still in shock and refusing to return to her post, the Headless Hunt portraits reluctantly recruit Sir Cadogan – a small, blustery knight on a fat gray pony – to stand guard. This is, in retrospect, a decision with significant consequences.

Sir Cadogan takes his new responsibilities with spectacular overenthusiasm. He rotates passwords daily, sometimes multiple times a day, picks phrases entirely at his own discretion, and shows no particular interest in whether the students can actually remember them. “Scurvy Cur” arrives in Chapter 14 (page 230 in the American edition), and it sounds exactly like something a medieval knight would shout at someone who had disrespected him. Which is, at this point in the book, somewhat apt.

The Gryffindors’ reaction to Cadogan’s tenure is a mixture of admiration – he is genuinely committed to the job – and exhaustion. Neville Longbottom’s solution to the memorization problem will, very shortly, make things considerably worse for everyone.

Oddsbodikins

Sir Cadogan’s second confirmed password, and one that required some light canonical negotiation to settle. Some sources spell it “Oddsbodkins” – dropping the middle “i” – but the accepted spelling across the Harry Potter Lexicon and the primary reference sources is “Oddsbodikins,” and that’s the version used here.

The phrase is an archaic exclamation – something like “God’s little body,” a mild oath that was already old-fashioned by the time Shakespeare was writing. It is exactly the sort of thing Sir Cadogan would say on a normal afternoon, which presumably explains the password selection. There is no indication that he ran his choices past anyone in an advisory capacity.

This is the password in use during the critical period when Neville Longbottom, unable to keep up with Sir Cadogan’s ever-changing list, began writing the passwords down in a diary. That diary – and its contents – was eventually stolen by Sirius Black, allowing him to enter Gryffindor tower and reach the dormitory where he slashed Ron Weasley’s bedding while searching for a sleeping Harry. It is one of the more consequential to-do lists in literary history. The password itself is blameless. The circumstances are not.

Flibbertigibbet

The third and final confirmed Sir Cadogan password, “Flibbertigibbet” arrives in Chapter 18 of Prisoner of Azkaban (page 295 in the American edition). By this point, the break-in has already occurred, Sir Cadogan has been blamed for admitting Sirius Black, and Cadogan is in disgrace. This password may thus represent the very end of his tenure – a late entry before dismissal – or simply another rotation in his characteristic style.

A “flibbertigibbet” is an old word for a chattering, gossipy person. In some traditions, it also refers to a minor devil. It appears in King Lear. The word has a pleasing phonetic quality that makes it sound both ridiculous and vaguely sinister, which fairly describes Sir Cadogan himself.

What’s notable about Cadogan’s three-password run – Scurvy Cur, Oddsbodikins, Flibbertigibbet – is that they form a kind of character portrait. Each one is archaic, vaguely combative, and memorable enough that you’d suspect the knight chose them for his own entertainment as much as for any security benefit. The Fat Lady, who names things like “Fortuna Major,” clearly had a different philosophy of password selection. Whether her approach was more effective is an open question. Sirius Black’s one successful entry suggests it was, at minimum, no worse.

Balderdash

Harry’s fourth year brings what is, by frequency of appearance, the most important Gryffindor password in the entire series. “Balderdash” shows up five times in Goblet of Fire – pages 191, 220, 284, 330, and 373 in the American edition – meaning it was in use for a larger chunk of the school year than any other single password across all seven books. Whether this reflects unusual security stability or simply reflects Rowling’s comfort with the word is not recorded.

“Balderdash” means nonsense, rubbish, or senseless chatter. It’s not obviously magical, it’s not a sweet (Dumbledore’s exclusive office tradition), and it has no discernible connection to Gryffindor’s character. It does, however, have the virtue of being genuinely hard to forget.

By Goblet of Fire, Hogwarts was hosting the Triwizard Tournament, and Gryffindor tower functioned as something of a command post for Harry and his friends. Balderdash was the password during the period covering the Goblet’s selection of champions, the First Task in the dragon enclosure, and much of what followed. It spans roughly the most eventful continuous stretch of fourth year. A larger portion of the book’s major events happened on the other side of this password than any other. It is, in that sense, one of the load-bearing passwords of the whole series.

Fairy Lights

The passwords rotate more frequently as fourth year progresses. “Fairy Lights” replaces Balderdash somewhere around the period of the Second Task, appearing in Goblet of Fire on pages 398, 411, and 432 in the American edition. It’s a markedly more festive choice than its predecessor, which is either coincidence or a reflection of the celebratory atmosphere that’s supposed to attend the Triwizard Tournament.

Fairy lights – small decorative illuminations of the sort that go up around Christmas – are a recognizably cozy domestic image dropped into the middle of a year that was becoming progressively less cozy. By the time this password is in use, Harry has already survived the First Task in a dragon enclosure and is preparing for the murky depths of the second. “Fairy Lights” as a password to come home to after all that has an almost sardonic quality.

The password doesn’t appear in any moment of particular narrative tension – it’s the kind of background detail that registers as worldbuilding rather than plot – but it’s a reminder that life at Gryffindor tower continued in its ordinary rhythms even when extraordinary things were happening to Harry in the lake, the tent, and the corridors below.

Banana Fritters

The third fourth-year password, and arguably the one that most firmly establishes the principle that Gryffindor password selection had no overarching theme. “Caput Draconis” suggested a classical education. “Balderdash” suggested a word-a-day calendar. “Banana Fritters” suggests someone had just come back from lunch.

The password appears once in Goblet of Fire, on page 459 in the American edition, which places it late in the year – roughly around the Third Task period. It’s a small reminder that even during what turned out to be the most dangerous year of Harry’s time at Hogwarts up to that point, someone at Gryffindor was diligently cycling through new passwords on schedule.

There’s a mild comedy to this that Rowling never overplays. The password is just there, unremarked upon, waiting for Harry to say it while he’s carrying the weight of the year’s events. Banana fritters are a fried dessert – battered banana, typically served warm, entirely pleasant, entirely Muggle in character. As passwords go, it’s the most unassuming entry in the fourth-year section. Some years, unassuming is what you need.

Mimbulus Mimbletonia

Fifth year brings the most distinctive Gryffindor password in the series, and the only one directly connected to a specific character. “Mimbulus Mimbletonia” is also the name of the cactus-like plant that Neville Longbottom brings back on the Hogwarts Express at the start of Order of the Phoenix – a rare specimen he received from his great-uncle Algie as a birthday present. The password appears four times in the book (pages 216, 251, 275, and 383 in the American edition), meaning it endured through a substantial portion of Harry’s fifth year.

The obvious implication is that a Gryffindor prefect who knew about Neville’s prize plant selected it as the common room password. Order of the Phoenix is the book in which Neville begins his long move from background character to genuine hero, and there’s something quietly touching about his most prized possession serving as the key to the common room. Whether this was a compliment or someone’s idea of a joke is one of those small social questions the text leaves open.

“Mimbulus Mimbletonia” is also, by syllable count, the longest password on this list – seven syllables, requiring genuine effort at the portrait hole after a long Friday. No other password asks quite that much of you.

Dilligrout

The first password of Harry’s sixth year, and the beginning of a stretch in which Gryffindor tower went through five distinct passwords in a single book – a series record. “Dilligrout” appears in Chapter 12 of Half-Blood Prince (page 241 in the American edition) and turns out to be a real historical word: a thick, milky porridge traditionally served at the coronation feast of Henry V of England.

Whether the person who set this password knew that piece of culinary history is unclear. It has the feel of a word someone found unusual and worth remembering – which is, after all, the primary virtue of a password. It’s not majestic, but it’s distinctive. You would not easily confuse “Dilligrout” with anything else in the English language.

By sixth year, the texture of Hogwarts had shifted. Dumbledore was giving Harry private lessons. Snape was teaching Defense Against the Dark Arts. A war was beginning to make itself felt at the edges of the school grounds. “Dilligrout” greets all of this with the impassivity of a Fat Lady who has seen things before, and who will, before the year is out, see considerably more.

Baubles

The second sixth-year password suggests either that Gryffindor had adopted a loose seasonal theme or that password selection had become entirely freestyle by this point in the series. “Baubles” appears in Chapter 14 of Half-Blood Prince (page 289 in the American edition), which puts it in roughly the late autumn to early winter portion of the school year.

A bauble is a small, shiny ornament – the kind you put on a Christmas tree, or that a magpie might collect. It’s also an old term for a jester’s scepter, which adds a faintly theatrical quality to the whole enterprise. As Gryffindor passwords go, it’s brisk and cheerful.

Half-Blood Prince is the book in which Harry spends more time on romantic complications than on any other topic, which means that “Baubles” was the password during much of his extended will-he-won’t-he situation with Ginny Weasley. This is not a meaningful connection. It does mean, however, that a significant portion of Harry’s emotional life played out on the other side of a door that required you to say “Baubles” to get through. There are worse words to greet you.

Abstinence

The third sixth-year password is also the one most obviously inviting a raised eyebrow. “Abstinence” appears in Chapter 17 of Half-Blood Prince (page 329 in the American edition), which places it squarely during the period when romantic relationships among the Gryffindors were in full swing. Harry and Ginny. Lavender Brown and Ron. Hermione’s sustained misery about Ron and Lavender. The common room had, by this point, become something of a social minefield.

Whether the person who selected “Abstinence” as the password was aware of the irony, making a deliberate comment, or simply chose a long word at random is one of the small mysteries the text does not resolve. Rowling has never weighed in on the question, as far as anyone knows.

From a security standpoint, “Abstinence” is actually a reasonable choice: long enough to be memorable, unusual enough that no one would stumble upon it by accident, specific enough to resist a casual guess. Its dramatic appropriateness to the plot is presumably a bonus. The Fat Lady announces it with no detectable irony. She has been doing this job for a very long time.

Tapeworm

By the fourth sixth-year password, one begins to wonder whether the rotation was being managed by committee, or by someone actively trolling the rest of Gryffindor. “Tapeworm” appears in Half-Blood Prince on page 461 of the American edition – which also happens to be the same page where “Toffee Éclairs” appears as the Headmaster’s office password. Both passwords changed at roughly the same narrative moment, in both cases abandoning the relative dignity of their predecessors.

A tapeworm is a parasitic flatworm. It is, in the hierarchy of things one might say aloud to a portrait of a large woman in order to gain entry to one’s dormitory, arguably the least appealing option on this entire list. “Pig Snout” at least refers to something external to the human body. “Tapeworm” occupies a different category entirely.

It does have the considerable virtue of being impossible to forget once heard, which is perhaps the main thing going for it. Security through memorability. In the context of sixth year at Hogwarts, where considerably more alarming things were occurring at all levels of the castle, “Tapeworm” as a daily password is, if nothing else, a small act of tonal normalcy.

Quid Agis

The final confirmed Gryffindor password, and the only one in the series that comes with a built-in translation question. “Quid Agis” is Latin – it means “How are you?” or, more literally, “What are you doing?” – and it appears in Half-Blood Prince on page 499 of the American edition, near the end of Harry’s sixth year.

Caput Draconis opened Gryffindor tower in the first book with Latin, and Quid Agis closes the confirmed password list with Latin as well. Whether this symmetry was deliberate is the kind of question that Rowling has occasionally answered and occasionally left to fans. The Latin bookending could be coincidence. At this point in the series, coincidences are harder to believe.

“What are you doing?” is, as passwords go, a genuinely interesting choice for a final entry. It’s conversational, mildly interrogative, and in context carries quiet weight – by late in Half-Blood Prince, “what are you doing?” might reasonably apply to several characters in the vicinity of Gryffindor tower. Nothing that follows is good. The Fat Lady asks it; the door opens; the year is almost done.

Sherbet Lemon

The first password to Dumbledore’s office, and the one that established what would become the defining characteristic of every single one that followed: it’s a candy. Specifically, a sherbet lemon is a hard British boiled sweet with a fizzy powder center – the kind Dumbledore mentions preferring in the very first chapter of Philosopher’s Stone, offering one to Professor McGonagall as she sits on a garden wall in Little Whinging watching for Hagrid and a baby.

In UK and Australian editions of Chamber of Secrets, Chapter 11, the gargoyle password is “Sherbet Lemon.” American readers get “Lemon Drop” – a different sweet, a rounded hard candy with a tart lemon flavor, but the same logic applies: Dumbledore’s passwords are his snacks. The two editions use different confections for the same scene, the same gargoyle, and the same security purpose. McGonagall speaks it to bring Harry and Ron to Dumbledore’s office after the attack on Mrs. Norris.

What this password quietly tells you about Dumbledore: the most powerful wizard alive, Headmaster of the most important magical school in Britain, chose to secure his office with the name of a sweet. He was either entirely unconcerned about unauthorized access, deeply whimsical, or – given that all subsequent passwords followed the same theme – committed to a very deliberate aesthetic.

Cockroach Cluster

All of Dumbledore’s office passwords are sweets, but Cockroach Cluster is the one Harry discovers by accident – which makes it considerably more consequential than the others. In Goblet of Fire, Chapter 29, Harry is wandering the school in distress after overhearing a conversation he wasn’t meant to hear. He walks past the gargoyle, mutters “Cockroach Cluster” almost experimentally, and finds himself riding the spiral staircase up to the empty office.

It’s one of those moments where the plot opens itself generously: here is information you need, through a door you shouldn’t have been able to open. The accident feels managed somehow, even if it isn’t.

Cockroach Clusters are a canonical Wizarding World confection – sold at Honeydukes, briefly mistaken for something Ordinary by Ron in Prisoner of Azkaban. Whether Dumbledore actually liked them or simply cycled through the entire Honeydukes catalog for password purposes is not established. What Harry finds in the office – access to the Pensieve, and the memory inside it – changes everything he understood about the night his parents died. A password discovered by accident. A door that shouldn’t have opened. The information that did.

Fizzing Whizbee

Dumbledore’s fifth-year office password appears twice in Order of the Phoenix (pages 466 and 609 in the American edition) – once when Harry is summoned following the incident with Umbridge’s Educational Decrees, and once later in the year during a very different kind of visit. It’s a good password in the Dumbledore mode: unmistakably a sweet, slightly silly, and absolutely not the kind of thing you’d guess without prior knowledge.

A Fizzing Whizbee is a large sherbet ball that temporarily levitates the consumer who eats it. Sold at Honeydukes. Dumbledore is described elsewhere as particularly fond of sweets, and the password selection reflects a man who saw no compelling reason why the things you enjoy and the things you use for security should be in separate categories.

Order of the Phoenix is the book in which access to Dumbledore becomes most fraught and politically complicated. Umbridge was monitoring the school; Ministry oversight was installed across the building; Dumbledore was maneuvering around constraints that would soon see him removed from the premises entirely. And yet the password to his office remained a piece of levitating candy. There is something almost defiant about the consistency.

Acid Pops

The first confirmed password to Dumbledore’s office in Harry’s sixth year, Acid Pops appears in Chapters 9 and 10 of Half-Blood Prince (page 185 in the American edition). Harry is summoned to the office – one of the private lessons that define the book’s structure – and speaks it to the gargoyle without fanfare.

An Acid Pop is another Honeydukes classic: a lollipop that burns a hole through your tongue if you’re not careful. Ron lost a large portion of his tongue to one when he was seven, a detail Rowling drops in passing in Prisoner of Azkaban. As passwords go, it belongs to the more aggressive end of the Honeydukes product line.

By sixth year, Dumbledore’s office visits carry a different weight than previous years. The Pensieve is in regular use. Horcruxes have entered the conversation. The private lessons have the texture of something more urgent than education – more like preparation. Acid Pops opens all of it, a small confection standing guard over conversations that would shape the rest of the series.

Toffee Éclairs

The second confirmed sixth-year password for the Headmaster’s office, Toffee Éclairs appears in Half-Blood Prince on page 461 of the American edition – which, as noted in the Tapeworm entry, is the same page where the Gryffindor password also changed. Both passwords shifting simultaneously in the narrative is a small moment of housekeeping that grounds the world in routine even as extraordinary events accelerate around it.

A toffee éclair is an elongated caramel sweet – a staple of British confectionery, the kind found in a glass jar at the pick-and-mix counter, entirely familiar and entirely pleasant. It sits at the quieter end of the Wizarding sweets catalog, which perhaps reflects where Dumbledore was by late in his sixth year: quieter, more purposeful, aware of what was coming.

The accent on “Éclairs” is confirmed in the HP Lexicon; some other references spell it without. Either way, same sweet, same gargoyle. Minor orthographic variation, as these things sometimes go.

Dumbledore

After Dumbledore’s death at the end of Half-Blood Prince, Severus Snape becomes Headmaster of Hogwarts. He then sets the gargoyle password to “Dumbledore.”

The discovery comes in Deathly Hallows, Chapter 33 – “The Prince’s Tale” – when Harry, having seen Snape’s memories in the forest and needing access to the Pensieve, instinctively blurts out the name. The gargoyle moves aside. Rowling’s narration is almost offhand about it: “Password?” “Dumbledore!” said Harry without thinking, because it was he whom he yearned to see, and to his surprise the gargoyle slid aside.

Everything in that sentence does a great deal of work. Harry says it “without thinking” – grief as reflex. And then the door opens, because Snape, who spent seven books appearing to despise Dumbledore with calculated contempt, kept the man’s name as the sole key to his own office.

There are longer meditations on grief and loyalty in literature. There are very few that land with this kind of efficiency. A gargoyle password at a fictional school is not supposed to be devastating. Somehow it is.

Pure-Blood

Harry’s one and only direct access to the Slytherin common room comes in Chamber of Secrets, Chapter 12, and it arrives via an act of impersonation. Harry and Ron, having brewed Polyjuice Potion and transformed themselves into Crabbe and Goyle, intercept Draco Malfoy on the way to the Slytherin dungeons and contrive to have him give them the password. He does, apparently not finding it strange that two of his closest friends required prompting to remember where they live.

“Pure-Blood” as a Slytherin password reflects the house’s governing ideology in a single hyphenated compound. Blood status – specifically the purity of magical lineage – was the lens through which Salazar Slytherin himself reportedly viewed the world, and the house he founded preserved that emphasis across the centuries. The password is not a coincidence. It is a declaration of membership requirements.

Harry and Ron’s ability to use it is one of the more quietly pointed moments in the series: two boys, neither remotely pure-blood by Slytherin’s standards, walking through a door that announced its own exclusivity as the price of admission. The password worked perfectly. The ideology, as it turned out, didn’t hold.

Pine Fresh

The only known password to the Prefects’ bathroom, on the fifth floor, is given to Harry by Cedric Diggory in Goblet of Fire, Chapter 23. It’s not a sweet, not a Latin phrase, and not a medieval insult – it’s the scent of a cleaning product. Which, given that it guards a bathroom containing roughly a hundred golden taps, a fireplace, and a chandelier dripping with candles, feels about right.

Cedric shares the password as an act of competitive goodwill: Harry is struggling to decode the golden egg’s clue, and Cedric, having already solved it himself, directs him to a bathtub large enough to fully submerge the egg and hear what it contains underwater. The Prefects’ bathroom is restricted to prefects, Head Boys and Girls, and – the book carefully notes – Triwizard champions. Harry qualifies on exactly one of those grounds.

“Pine Fresh” is a fine password, functional and unpretentious. The scene it unlocks is one of the more atmospheric in the series: a mermaid in a painting on the wall, Harry soaking in a vast pool with bubbles in every color, Moaning Myrtle arriving uninvited to offer unsolicited commentary. As access codes go, it does its job.

A circle has no beginning

The Ravenclaw common room operates differently from every other entrance in Hogwarts. There is no Fat Lady, no gargoyle, no fixed phrase remembered from last week. Instead, a bronze door knocker shaped like an eagle poses a riddle, and the answer – whatever it happens to be that visit – functions as the key. There is no standing password. The riddle changes each time. A student who cannot solve it is simply not admitted.

Harry encounters this system for the first time in Deathly Hallows, Chapter 29, when he needs access to Ravenclaw tower to search for the diadem. He’s invisible under his Invisibility Cloak. Luna Lovegood speaks for both of them. The knocker’s riddle: “Which came first, the phoenix or the flame?” Luna’s answer: “A circle has no beginning.” The door opens.

It’s a good answer – the kind the riddle demands if you think through it carefully rather than reaching for the obvious framing of a before-and-after question. It comes from Luna, who processes the world through a different filter than most people and cuts directly to what the question actually requires. “A circle has no beginning” functions as both logic and philosophy, which is presumably what the knocker was looking for. The system is arguably the most elegant entry mechanism in the building. It also means you can be locked out of your own common room if you’re having a slow intellectual day.

Into nonbeing, which is to say, everything

The second Ravenclaw riddle answer, and the one that comes from Professor McGonagall, arrives later in the same chapter of Deathly Hallows during the Battle of Hogwarts. The door knocker poses a new question: “Where do Vanished objects go?” McGonagall answers: “Into nonbeing, which is to say, everything.”

It is, as philosophical answers go, excellent. Vanishing is not destruction – the Vanishing Spell doesn’t eliminate matter, it transitions objects to a state that is simultaneously nothing and everything, depending on your approach to the ontology. McGonagall provides this answer while navigating a castle under active siege, which says something about the quality of mind Hogwarts maintains at all levels, even during combat.

Like the previous Ravenclaw answer, this one is specific to a single visit. There is no standing password for Ravenclaw tower – every approach produces a new question requiring a new answer. The system rewards genuine intelligence, penalizes rote memorization, and offers no assistance to anyone who is very tired or having a slow intellectual day. It is, in summary, very Ravenclaw. Both known answers survive in the text because both happen to occur during moments significant enough to document. Hundreds of ordinary Ravenclaw students answered hundreds of riddles across seven years of the series. None of those answers were recorded.

I solemnly swear that I am up to no good

The Marauder’s Map doesn’t guard a room or an office – it is itself the thing being protected, a piece of enchanted parchment that appears entirely blank until you know how to activate it. The phrase “I solemnly swear that I am up to no good” is the activation key: you tap your wand on the parchment, speak the words, and the map reveals itself – Hogwarts drawn in miniature, every corridor, every secret passage, every moving person labeled by name in real time.

Fred and George Weasley teach Harry the phrase in Prisoner of Azkaban, Chapter 10. As access codes go, it functions identically to a password, even if the object it unlocks is a document rather than a door. The phrasing is both a mission statement and a joke: you are solemnly swearing to something you are about to do poorly. It only works if it’s also, in some sense, true.

The Marauder’s Map was created by Remus Lupin, Peter Pettigrew, Sirius Black, and James Potter during their time as Hogwarts students. The activation phrase reads like something the four of them argued over and finally agreed on because it made them laugh. It becomes one of Harry’s most important tools across the series. Every use begins with this oath.

Mischief Managed

The deactivation phrase for the Marauder’s Map, introduced in the same chapter as its counterpart. After use, tapping your wand on the map and saying “Mischief Managed” clears it back to blank parchment – essential when, for example, a professor is approaching the corridor where you’re currently standing with a map that reveals everyone’s real-time location.

Harry learns the importance of this quickly. In Prisoner of Azkaban, he fails to clear the map in time and very nearly has it confiscated by Snape – who eventually does acquire it, and who is then taunted by the map’s insults even as he attempts to extract information from it. The map, true to its creators’ spirit, is entirely unimpressed by Snape and makes its feelings clear through the parchment itself.

“Mischief Managed” is the counterpart to “I solemnly swear that I am up to no good” – activation and deactivation, mischief begun and mischief concluded. Together they form a kind of miniature liturgy for covert operation. The Marauders built both phrases into the object, which suggests they thought through the full user experience of secret map management with genuine care. They were thorough people, when it suited them, which was apparently often.

Open (in Parseltongue)

Harry Potter is a Parselmouth – a speaker of snake language – by accident. When Voldemort tried to kill him as an infant, the rebounding curse transferred fragments of Voldemort’s own abilities into Harry, and Parseltongue was among them. The skill unsettles most of the wizarding world. It does, however, open things.

The entrance to the Chamber of Secrets, in the second-floor girls’ bathroom, is sealed by a snake etched into one of the sink taps. Harry speaks to it in Parseltongue – something functionally equivalent to “open up,” though the text presents it from Harry’s perspective as ordinary speech, with no translation provided. The sink shifts aside to reveal the pipe leading down into the Chamber. He does this first in Chamber of Secrets and again in Deathly Hallows, when he and Ron need to reopen the entrance to destroy a Horcrux.

Calling this a password is technically a category stretch: it’s closer to a language recognition system. The entrance doesn’t respond to a specific memorized phrase so much as to the sound of Parseltongue at all – only a heir of Slytherin, or someone who had absorbed Slytherin’s abilities, could produce the necessary language. The password isn’t really a word. It’s an inheritance.

62442

The Ministry of Magic’s visitor entrance sits on a quiet London street presenting itself as an ordinary red telephone box. To use it, you dial 62442 on the internal handset. The number spells M-A-G-I-C on the phone’s keypad. This is not subtle, but it is efficient, and the Ministry apparently operates on the assumption that Muggles will not look twice at someone making a phone call from a public box on a London street – an assumption that was more plausible in 1995 than it might be today.

Arthur Weasley demonstrates the system in Order of the Phoenix, Chapter 7, while bringing Harry in for his disciplinary hearing. The box descends into the Ministry’s underground atrium, badges are issued by the internal system, and the full security apparatus of the visitor entrance begins.

The code is the most Muggle-adjacent access method in the series: it’s a PIN, operating through a piece of Muggle technology, using a mapping system that anyone with a telephone dial could reverse-engineer. There’s something very Arthur Weasley about it, even though he almost certainly wasn’t involved in the design. He would have appreciated it enormously.

Dissendium

The One-Eyed Witch statue stands on the third-floor corridor at Hogwarts and looks, from the outside, like exactly what it is: a statue of a one-eyed witch, carved from stone, unremarkable. To open it, you tap your wand on the hump of the figure and whisper “Dissendium.” The hump swings open to reveal a stone chute that drops into a secret passage leading, eventually, up through the cellar of Honeydukes and into Hogsmeade.

The passage is documented on the Marauder’s Map, which is how Harry learns about it in Prisoner of Azkaban, Chapter 10. He uses it repeatedly over the course of the year to visit Hogsmeade without a signed permission slip – permissions that, owing to the Dursleys’ refusal to engage with anything connected to Hogwarts, he doesn’t have.

“Dissendium” is a spell-as-password: a magical incantation that activates a mechanism rather than a phrase spoken to a conscious guardian. It functions identically to a spoken password from a practical standpoint – say the right word, gain entry – but the mechanism is incantatory rather than relational. The word itself has no established Latin root in the canonical universe, though it sounds like the sort of thing a medieval wizard would consider perfectly self-explanatory. It works exactly as intended, every time.

Tickle the Pear

The Hogwarts kitchens are not accessible by any spoken word or wand gesture. The entrance is a large portrait of a fruit bowl hanging in a basement corridor, directly below the Great Hall. To gain entry, you reach up and tickle the pear in the painting. The pear giggles – a small, painted giggle – squirms in its painted basket, and transforms into a green door handle. The portrait swings open to reveal the kitchens: a vast room, four long tables directly below the Great Hall tables above, and several hundred house-elves going about the business of feeding a school.

Hermione discovers this – or perhaps learns it from a source connected to her early S.P.E.W. research – and shows Harry and Ron the method in Goblet of Fire. The passages appear on pages 320 and 327 of the American edition, during the period when Hermione is in the first stages of what will become her house-elf welfare campaign.

Of all the access methods in the series, this one is the most purely whimsical. No words, no wand, no incantation. Just a painted fruit that requires physical affection before it lets you through. The castle of Hogwarts, built over a thousand years ago by four of the most powerful witches and wizards in history, chose a giggling pear as the last line of defense for its catering operation. No one in the books ever comments on this.