A method for authentication facilitated via a trusted execution environment, comprising: reading, by an instrument reading device interfaced with a computing device, payment credentials stored in a payment instrument, wherein the payment credentials are electronically transmitted to a first application program, the first application program having program code stored in a first memory area of the computing device; encrypting, by the first application program of the computing device, using a first key of a key pair, an authentication request including the payment credentials read by the instrument reading device; electronically transmitting, by the first application program of the computing device, the encrypted authentication request to a second application program, the second application program having program code stored in a trusted execution environment of the computing device separate from the first memory area, wherein the authentication request includes a unique identification value associated with the first application program submitting the request; decrypting, by the second application program, the authentication request using a second key of the key pair; determining, by the second application program using the identification value, whether the first application is authorized, by contacting an external computing system of an entity associated with the second application program; proceeding, by the second application program, with an authentication based on determining that the first application program is authorized; displaying, by a display device interfaced with the computing device, a prompt for authentication data based on an instruction supplied by the second application program; receiving, by an input device interfaced with the computing device, authentication data, wherein the authentication data is electronically transmitted to the second application program; electronically transmitting, by the second application program of the computing device, the received authentication data to an external computing device; receiving, by the second application program of the computing device, an authentication result based on the transmitted authentication data from the external computing device; and electronically transmitting, by the second application program of the computing device, the authentication result to the first application program in response to the authentication request. reading, by an instrument reading device interfaced with a computing device, payment credentials stored in a payment instrument, wherein the payment credentials are electronically transmitted to a first application program, the first application program having program code stored in a first memory area of the computing device; encrypting, by the first application program of the computing device, using a first key of a key pair, an authentication request including the payment credentials read by the instrument reading device; electronically transmitting, by the first application program of the computing device, the encrypted authentication request to a second application program, the second application program having program code stored in a trusted execution environment of the computing device separate from the first memory area, wherein the authentication request includes a unique identification value associated with the first application program submitting the request; decrypting, by the second application program, the authentication request using a second key of the key pair; determining, by the second application program using the identification value, whether the first application is authorized, by contacting an external computing system of an entity associated with the second application program; proceeding, by the second application program, with an authentication based on determining that the first application program is authorized; displaying, by a display device interfaced with the computing device, a prompt for authentication data based on an instruction supplied by the second application program; receiving, by an input device interfaced with the computing device, authentication data, wherein the authentication data is electronically transmitted to the second application program; electronically transmitting, by the second application program of the computing device, the received authentication data to an external computing device; receiving, by the second application program of the computing device, an authentication result based on the transmitted authentication data from the external computing device; and electronically transmitting, by the second application program of the computing device, the authentication result to the first application program in response to the authentication request.