In general, liveness detection techniques are described for facial recognition. The techniques enable potential detection and mitigation of attempts to authenticate by spoofing. An example method includes determining, by a computing device, a challenge pattern against which to match an authentication input to detect liveness, and displaying, using a display device, a graphical user interface (GUI) including an element and moving the element according to the challenge pattern within the GUI. The method further includes receiving, from an image capture device, at least a first image of a face and a second image of the face, and detecting one or more eye movements based on the first and second images of the face. The method further includes determining whether to deny authentication with respect to accessing one or more functionalities controlled by the computing device.