Secure electronic authentication of a user on an electronic device

A system, comprising:

• a server having a processor and a memory;
• a communication network;
• and
• a database in electronic communication with the server via the communication network, wherein the server is configured to:
• provide a mobile device application that a user can load onto a mobile device having a display screen and an input device, the mobile device application permitting the user to electronically authenticate an identity of the user, wherein the mobile device application is a user interface for a retailer that enables the user to browse, select, and purchase one or more items for sale by the retailer;
• receive, by a server, authentication credentials from the mobile device that are associated with an account the user has registered with the retailer;
• compare, by the server, the authentication credentials as received with account credentials stored in the database accessible to the server;
• based on the comparison, generate an authentication code in response to the authentication credentials as received matching with account credentials stored in the database;
• upon validation of the authentication code, send an authentication token that is encrypted from the server to the mobile device via a network for storage in a secure memory of the mobile device associated with the user interface for the retailer, wherein the authentication token has a first expiration period;
• cause the user interface for the retailer to display on the display screen of the mobile device an option to electronically authenticate using a biometric credential;
• receive, by the server, a selection indicating acceptance of use of authenticating using the biometric credential;
• and
• upon the server receiving the selection indicating acceptance of use of authenticating using the biometric credential:
• add an association between biometric authentication information from the biometric credential and information stored in the database regarding the authentication token, and
• extend an expiration period of the authentication token from the first expiration period to a second expiration period that is longer than the first expiration period;
• wherein the second expiration period is refreshed automatically when the user interface is accessed by the user prior to the second expiration period,
• wherein the authentication credentials are not stored in the secure memory of the mobile device associated with the mobile device application, and
• wherein the authentication token enables use of the user interface for the retailer on the mobile device without the user entering the authentication credentials until one of the first expiration period and the second expiration period.