Secured data access from a mobile device executing a native mobile application and a headless browser

1. A mobile device comprising:

a wireless transceiver:

a processor;

a display device; and

a memory storing instructions executable by the processor to perform operations comprising:

retrieving, at a native application, in an insecure medium, access credential data in encrypted form;

communicating with a remote server to receive decryption keys in a secure way;

receiving instructions from the remote server that used encryption keys need to be rotated;

communicating with the remote server to receive new encryption keys;

securely decrypting the access credential data at the native application;

securely encrypting the access credential data at the native application using the new encryption keys;

storing the encrypted access credential data in the insecure medium replacing the existing access credential data, and deleting the new encryption keys;

providing the decrypted access credential data from the native application to a headless browser;

initiating a secured connection via the wireless transceiver from the headless browser to a remote server that hosts a website, the remote server supporting access to secured data without relying on an application programming interface;

sending, by the headless browser and via the secured connection, the access credential data to the remote server;

receiving first web page data of the website from the remote server via the secured connection;

parsing the first web page data to identify user-specific data;

sending the user-specific data to the native application for display in a graphical user interface at, the display device;

receiving a user command via a user input device;

sending, by the headless browser and via the secured connection, a request to the remote server to access the secured data based on the user command; and

receiving, by the headless browser and via the secured connection, at least a portion of the secured data.