# What changed in @metamask/mobile-wallet-protocol-core

> 10 changes in @metamask/mobile-wallet-protocol-core 13 to 14 from its official release notes, upgrade guides and advisories: 3 breaking, 1 security, 5 new APIs and options. Each one cited. Sources checked 2026-10-19. HTML: https://unstale.sh/npm/@metamask/mobile-wallet-protocol-core/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @metamask/mobile-wallet-protocol-core 14

### Breaking changes

- Inbound messages on expired sessions are rejected instead of processed. (14.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v14.0.0)
- Node 18 support is dropped; Node 20 or later is required. (14.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v14.0.0)
- The SessionStore constructor is private; create instances with `await SessionStore.create(kvstore)` instead. (14.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v14.0.0)

### Security

- Uses timing-safe comparison for OTP verification. (14.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v14.0.0)

### New APIs and options

- Adds connection mode values for runtime validation. (14.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v14.0.0)
- Adds a method for validating peer public keys at handshake and resume time. (14.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v14.0.0)
- Adds runtime validation of connection mode values. (14.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v14.0.0)

### Fixes and other changes

- Guards against `NaN` values in session expiry timestamps. (14.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v14.0.0)

## @metamask/mobile-wallet-protocol-core 13

### New APIs and options

- ESM paths are now exported, allowing developers to use the package's ESM entry points. (13.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v13.0.0)
- ESM paths are now exported, allowing developers to use the package's ESM entry points. (13.0.0) — [release notes](https://github.com/MetaMask/mobile-wallet-protocol/releases/tag/v13.0.0)