diff --git a/plugin.sh b/plugin.sh
index 0f70105..aada374 100755
--- a/plugin.sh
+++ b/plugin.sh
@@ -63,7 +63,7 @@ run_stack_wait() {
 run_purge() {
   echo "--- start purge ---"
   docker -H "$DOCKER_HOST" stack rm "$PLUGIN_STACK"
-  # TODO: also cleanup secrets once that is sorted
+  docker -H "$DOCKER_HOST" secret ls -q | docker -H "$DOCKER_HOST" secret rm
   echo "--- end purge ---"
 }