diff --git a/sh/cryptsetup.sh b/sh/cryptsetup.sh
index b562ce3..ba94a8a 100644
--- a/sh/cryptsetup.sh
+++ b/sh/cryptsetup.sh
@@ -101,6 +101,10 @@ rwx_crypt() {
 					if ! qemu-nbd --disconnect "${device}"; then
 						rwx_log_error 8 "Disconnection failure: ${device}"
 					fi
+					# remove record
+					if ! rm "${RWX_CRYPT_ROOT}/${crypt_arg}"; then
+						rwx_log_error 9 "Removal failure: ${crypt_arg}"
+					fi
 					;;
 				*) ;;
 				esac