Confirming access for a user includes capturing an image of the user, capturing information on an identity badge worn by the user, and denying access to a resource in response to the information being inconsistent with the image. Confirming access for a user may also include denying access in response to the information being inconsistent additional information about the user stored in a database. The information may include a picture of the user. The resource may include access to an area. The resource may include access to a computer. Confirming access for a user may also include, following allowing access to the computer, periodically recapturing the image of the user and recapturing the information on the identity badge and denying access to the computer in response to the information being inconsistent with the image. The information may include a visual code that identifies the user.