diff --git a/src/cli/commands/recipient.ts b/src/cli/commands/recipient.ts
index c2cf30f..45a168d 100644
--- a/src/cli/commands/recipient.ts
+++ b/src/cli/commands/recipient.ts
@@ -31,7 +31,9 @@ export async function adminOverview(): Promise<void> {
   console.log('\nvaults:');
   if (!data.vaults.length) console.log('  none yet.');
   for (const v of data.vaults) {
-    console.log(`  ${v.vaultKey}`);
+    const updated = v.updatedAt ? new Date(v.updatedAt * 1000).toISOString() : 'unknown';
+    const by = v.updatedByLabel ?? v.updatedBy ?? 'unknown';
+    console.log(`  ${v.vaultKey}  (updated ${updated} by ${by})`);
     for (const g of v.grants) {
       console.log(`    ${g.canWrite ? 'rw' : 'r-'}  ${g.recipientId}  ${g.label ?? '(unknown recipient)'}`);
     }
diff --git a/src/server/adminRoutes.ts b/src/server/adminRoutes.ts
index 28967eb..be1a345 100644
--- a/src/server/adminRoutes.ts
+++ b/src/server/adminRoutes.ts
@@ -57,6 +57,7 @@ router.get('/overview', (_req, res) => {
     vaultKey: v.vault_key,
     updatedAt: v.updated_at,
     updatedBy: v.updated_by,
+    updatedByLabel: byId.get(v.updated_by)?.label ?? null,
     grants: listGrantsForVault(v.vault_key).map(g => ({
       recipientId: g.recipient_id,
       label: byId.get(g.recipient_id)?.label ?? null,