diff --git a/flyctl/cmd/fly_secrets.md b/flyctl/cmd/fly_secrets.md
index f70d0338e4..d045e50316 100644
--- a/flyctl/cmd/fly_secrets.md
+++ b/flyctl/cmd/fly_secrets.md
@@ -11,7 +11,7 @@ fly secrets [command] [flags]
 ## Available Commands
 * [deploy](/docs/flyctl/secrets-deploy/)	 - Deploy staged secrets for an application
 * [import](/docs/flyctl/secrets-import/)	 - Set secrets as NAME=VALUE pairs from stdin
-* [list](/docs/flyctl/secrets-list/)	 - List application secret names, digests and creation times
+* [list](/docs/flyctl/secrets-list/)	 - List application secret names, digests and deployment status
 * [set](/docs/flyctl/secrets-set/)	 - Set one or more encrypted secrets for an application
 * [sync](/docs/flyctl/secrets-sync/)	 - Sync flyctl with the latest versions of app secrets, even if they were set elsewhere
 * [unset](/docs/flyctl/secrets-unset/)	 - Unset one or more encrypted secrets for an application
diff --git a/flyctl/cmd/fly_secrets_list.md b/flyctl/cmd/fly_secrets_list.md
index 02b91d9c8d..172a0cae8e 100644
--- a/flyctl/cmd/fly_secrets_list.md
+++ b/flyctl/cmd/fly_secrets_list.md
@@ -1,7 +1,17 @@
 List the secrets available to the application. It shows each secret's
-name, a digest of its value and the time the secret was last set. The
+name, a digest of its value and the deployment status across machines. The
 actual value of the secret is only available to the application.
 
+Secrets that need deployment are prefixed with an indicator:
+  *  Staged secret (not deployed to any machines)
+  !  Partial deployment (deployed to some but not all machines)
+
+Deployment status:
+  Deployed     - Secret is deployed to all machines (secret updated_at <= machine release created_at)
+  Staged       - Secret is staged but not deployed to any machines
+  Partial      - Secret is deployed to some but not all machines (rolling deployment in progress)
+  Unknown      - Status cannot be determined (missing timestamps, too many machines, or API error)
+
 ## Usage
 ~~~
 fly secrets list [flags]