Secured data access from a mobile device executing a native mobile application and a headless browser

A mobile device comprising:

• a wireless transceiver:
• a processor;
• a display device;
• and
• a memory storing instructions executable by the processor to perform operations comprising:
• retrieving, at a native application, in an insecure medium, access credential data in encrypted form;
• communicating with a remote server to receive decryption keys in a secure way;
• receiving instructions from the remote server that used encryption keys need to be rotated;
• communicating with the remote server to receive new encryption keys;
• securely decrypting the access credential data at the native application;
• securely encrypting the access credential data at the native application using the new encryption keys;
• storing the encrypted access credential data in the insecure medium replacing the existing access credential data, and deleting the new encryption keys;
• providing the decrypted access credential data from the native application to a headless browser;
• initiating a secured connection via the wireless transceiver from the headless browser to a remote server that hosts a website, the remote server supporting access to secured data without relying on an application programming interface;
• sending, by the headless browser and via the secured connection, the access credential data to the remote server;
• receiving first web page data of the website from the remote server via the secured connection;
• parsing the first web page data to identify user-specific data;
• sending the user-specific data to the native application for display in a graphical user interface at, the display device;
• receiving a user command via a user input device;
• sending, by the headless browser and via the secured connection, a request to the remote server to access the secured data based on the user command;
• and
• receiving, by the headless browser and via the secured connection, at least a portion of the secured data.