A system comprises servers having processing circuits and a non-transitory storage medium, the non-transitory storage medium having computer code that is executable to cause the system to receive a unique identifier and to identify, in response to receiving the unique identifier, a virtual object stored by the one or more servers in association with the unique identifier. The computer code is further executable to transmit the virtual object and an immersive simulated three-dimensional environment to a separate device and to receive virtual motion data of a virtual movement of the virtual object relative to the immersive simulated three-dimensional environment. The computer code is further executable to determine that separate device is authorized to access a resource of the system and to transmit, in response to the determination that the user of the separate device is authorized, an authorization message to the separate device.