diff --git a/svr-authpam.c b/svr-authpam.c
index 05e4f3e52..38d7fd8af 100644
--- a/svr-authpam.c
+++ b/svr-authpam.c
@@ -263,6 +263,8 @@ void svr_auth_pam() {
 	dropbear_log(LOG_NOTICE, "PAM password auth succeeded for '%s' from %s",
 			ses.authstate.pw_name,
 			svr_ses.addrstring);
+	/* reset the pam counter on a successful attempt */
+	pam_setcred(pamHandlep, PAM_ESTABLISH_CRED);
 	send_msg_userauth_success();
 
 cleanup: