diff --git a/usr.bin/chkey/chkey.c b/usr.bin/chkey/chkey.c
index db0b743fd583..309827192dd4 100644
--- a/usr.bin/chkey/chkey.c
+++ b/usr.bin/chkey/chkey.c
@@ -203,6 +203,7 @@ main(int argc, char **argv)
 			    write(fd, &newline, sizeof(newline)) < 0)
 				warn("%s: write", ROOTKEY);
 		}
+		close(fd);
 	}
 
 	if (key_setsecret(secret) < 0)