4login

Secure your site with a strong password — without the hassle of remembering it. 
With 4Login, you get simple yet powerful authentication that connects to an external server. 
Simply create your own pattern to generate a dynamic password that updates every 60 minutes.
Please refer to the <a href="https://www.4login.jp/" rel="nofollow ugc">operation Instructions </a> for instructions on how to use 4Login.
<h3>External services</h3>
This plugin connects to an external API to enable 4Login authentication. 
When logging in with 4Login, the plugin sends the 4Login App Service ID, the user’s email address, and a dynamic password . 
These credentials are entered directly within the WordPress login interface.
This authentication service is provided by Passlogy. 
For more information, please review our 
<a href="https://www.4login.jp/en/auto_terms/" rel="nofollow ugc">Terms of Service</a> and 
<a href="https://www.4login.jp/privacy-policy/?en=app" rel="nofollow ugc">Privacy Policy</a>.

4Login for Secure And Smart Access

4Login will give you an easy and powerful authentication (connect to an external server for authentication).

oosoft

OOSOFT

OOSOFT 2FA Security adds robust two-factor authentication to your WordPress site. Protect every login with a second verification step using a TOTP authenticator app (Google Authenticator, Authy, etc.) or a one-time code sent to your email address.
Key Features:
<ul>
<li>TOTP Authenticator App — compatible with Google Authenticator, Authy, Microsoft Authenticator, and any RFC 6238-compliant app.</li>
<li>Email OTP — sends a time-limited one-time code to the user’s registered email address.</li>
<li>Backup Codes — generate single-use recovery codes so users are never locked out.</li>
<li>Role-Based Enforcement — require 2FA for specific roles (e.g. administrators) while leaving it optional for others.</li>
<li>Rate Limiting — brute-force protection with configurable attempt limits and lockout periods.</li>
<li>Security Logs — detailed event logging with filterable admin view and automatic pruning.</li>
<li>Encrypted Secret Storage — TOTP secrets are encrypted at rest using libsodium (preferred) or AES-256-GCM/CBC via OpenSSL.</li>
<li>HKDF Key Derivation — encryption keys are derived from your WordPress secret keys; no raw key material is stored.</li>
</ul>

OOSOFT 2FA Security

Enterprise-grade Two-Factor Authentication for WordPress with TOTP, Email OTP, backup codes, and role-based enforcement.

4Login for Secure And Smart Access vs OOSOFT 2FA Security