One embodiment provides a method, including: detecting, from a user and using a sensor operatively coupled to an information handling device, for facial features associated with an authorized user; requesting, using a prompt provided by an output device operatively coupled to an information handling device, the user to mimic at least one emotion; detecting, responsive to the requesting, at least one facial expression provided by the user; and authenticating the user responsive to determining that: the at least one facial expression corresponds to at least one accepted facial expression associated with the at least one emotion and the at least one facial expression comprises the facial features. Other aspects are described and claimed.