diff --git a/man/crypttab.xml b/man/crypttab.xml
index 5eb1c12232c..76eef06bed8 100644
--- a/man/crypttab.xml
+++ b/man/crypttab.xml
@@ -151,6 +151,17 @@
sequential order.
+
+
+
+ Specifies the timeout for the device on
+ which the key file resides and falls back to a password if
+ it could not be mounted. See
+ systemd-cryptsetup-generator8
+ for key files on external devices.
+
+
+
@@ -438,7 +449,8 @@
luks UUID=2505567a-9e27-4efe-a4d5-15ad146c258b
swap /dev/sda7 /dev/urandom swap
truecrypt /dev/sda2 /etc/container_password tcrypt
-hidden /mnt/tc_hidden /dev/null tcrypt-hidden,tcrypt-keyfile=/etc/keyfile
+hidden /mnt/tc_hidden /dev/null tcrypt-hidden,tcrypt-keyfile=/etc/keyfile
+external /dev/sda3 keyfile:LABEL=keydev keyfile-timeout=10s