diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index 348fdc3..78c7894 100644
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -368,13 +368,27 @@ start_services() {
 
 show_bootstrap_key() {
     echo ""
-    info "Clé API bootstrap (admin) — conservez-la précieusement :"
-    local key=$(docker compose -f "$COMPOSE_FILE" logs backend 2>/dev/null | grep "API_KEY:" | tail -1 | sed 's/.*API_KEY: //;s/".*//' || echo "")
-    if [[ -n "$key" ]]; then
-        echo -e "  ${BOLD}${GREEN}${key}${NC}"
-    else
-        echo "  (aucune clé trouvée — vérifiez les logs si premier déploiement)"
+    echo -e "${BOLD}${BLUE}── Authentification ──${NC}"
+
+    # Clé bootstrap (logs, premier démarrage)
+    local bootstrap=$(docker compose -f "$COMPOSE_FILE" logs backend 2>/dev/null | grep "API_KEY:" | tail -1 | sed 's/.*API_KEY: //;s/".*//' || echo "")
+    if [[ -n "$bootstrap" ]]; then
+        echo -e "  Clé bootstrap (admin) : ${BOLD}${GREEN}${bootstrap}${NC}"
     fi
+
+    # ADMIN_API_KEY (.env)
+    local master=""
+    if [[ -f "$ENV_FILE" ]]; then
+        master=$(grep "^ADMIN_API_KEY=*** "$ENV_FILE" 2>/dev/null | cut -d= -f2- | sed "s/^['"]//;s/['"]$//" || echo "")
+    fi
+    if [[ -n "$master" ]]; then
+        echo -e "  Master Key (ADMIN_API_KEY) : ${BOLD}${GREEN}${master}${NC}"
+    fi
+
+    if [[ -z "$bootstrap" ]] && [[ -z "$master" ]]; then
+        echo "  (aucune clé trouvée — vérifiez les logs backend)"
+    fi
+    echo ""
 }
 
 show_status() {
@@ -427,6 +441,7 @@ case "${1:-}" in
         check_prerequisites
         restart_updated
         show_status
+        show_bootstrap_key
         show_urls
         ;;
     --reconfigure|--config)