A method for maintaining security in a distributed augmented-reality (AR) system is provided. The method may include generating a database that includes a list of objects associated with sensitive information. The method may include receiving requests from a plurality of user devices to participate in an AR session, and determining an authorization level to associate with each of the plurality of user devices. The method may include receiving, from a first one of the plurality of user devices, an image that was scanned in via a camera of the first user device. The method may include processing the image to determine if the image includes one of the objects. When the image includes one of the objects, the method may include masking the object in the image. The method may include transmitting, for display in the AR session, the image with the masking to user devices with a default authorization level, and transmitting, for display in the AR session, the image without the masking to user devices with a trusted authorization level.