diff --git a/cowrie/wardenfiler.py b/cowrie/wardenfiler.py
index 342f1de6b804f7f476a52b147b09d630080ca9fb..fa61cec20e324e7212f44512059b49dac673efcc 100644
--- a/cowrie/wardenfiler.py
+++ b/cowrie/wardenfiler.py
@@ -400,7 +400,8 @@ class Output(cowrie.core.output.Output):
                         attach["ContentEncoding"] = "base64"
                     event["Attach"] = [attach]
                 if self.sessions[s]["credentials"]:
-                    event["Credentials"] = self.sessions[s]["credentials"]
+                    accepted_creds = [ c for c in self.sessions[s]["credentials"] if "Accepted" in c ]
+                    event["Credentials"] = list(accepted_creds)
                 self.save_event(event)
             
             if s in self.sessions: