One embodiment provides a method, including: receiving, at an information handling device, a touchless command to perform an action; determining, using a processor, whether the action is one of: a protected action and an unprotected action; and requesting, responsive to determining that the action is associated with a protected action, user authentication input prior to performing the action. Other aspects are described and claimed.