diff --git a/pam.c b/pam.c
index a603bd8..0adc9c6 100644
--- a/pam.c
+++ b/pam.c
@@ -112,6 +112,8 @@ void run_pw_backend_child(void) {
 		pw_buf = NULL;
 	}
 
+	pam_setcred(auth_handle, PAM_REFRESH_CRED);
+
 	if (pam_end(auth_handle, pam_status) != PAM_SUCCESS) {
 		swaylock_log(LOG_ERROR, "pam_end failed");
 		exit(EXIT_FAILURE);