The disclosed techniques enable virtual content displayed in an experience to be restricted and/or tailored based on a user identification. User information (e.g., login name, authentication credentials such as a password or biometric data, etc.) can be used to determine and/or authenticate an identification of a user that enters and/or consumes an experience via a head-mounted display device or another computing device connected to a head-mounted display device. The user identification can be used to determine which virtual content is displayed to the user as part of an experience. Consequently, different users that enter the same experience can be presented with different virtual content. This enables a creator of the experience to restrict the viewing of confidential and/or sensitive information. This also enables the creator of the experience to tailor or customize the virtual content that is displayed to each user that enters and/or consumes the experience.