Authenticating a security article comprises capturing biographic information from the security article, detecting a physical property of a security feature on and/or in the security article, processing the captured biographic information and the detected physical property of the security feature to determine whether the security article is genuine, and outputting a signal indicative of the determination.