diff --git a/mediagoblin/templates/mediagoblin/auth/change_fp.html b/mediagoblin/templates/mediagoblin/auth/change_fp.html
index 4be7e065..53186cec 100644
--- a/mediagoblin/templates/mediagoblin/auth/change_fp.html
+++ b/mediagoblin/templates/mediagoblin/auth/change_fp.html
@@ -23,6 +23,8 @@
 
   <form action="{{ request.urlgen('mediagoblin.auth.verify_forgot_password') }}"
         method="POST" enctype="multipart/form-data">
+    {{ csrf_token }}
+
     <div class="grid_6 prefix_1 suffix_1 form_box">
       <h1>{% trans %}Enter your new password{% endtrans %}</h1>
 
diff --git a/mediagoblin/templates/mediagoblin/auth/forgot_password.html b/mediagoblin/templates/mediagoblin/auth/forgot_password.html
index 23fa9eb5..b95a4dcb 100644
--- a/mediagoblin/templates/mediagoblin/auth/forgot_password.html
+++ b/mediagoblin/templates/mediagoblin/auth/forgot_password.html
@@ -23,6 +23,8 @@
 
   <form action="{{ request.urlgen('mediagoblin.auth.forgot_password') }}"
         method="POST" enctype="multipart/form-data">
+    {{ csrf_token }}
+
     <div class="grid_6 prefix_1 suffix_1 form_box">
       <h1>{% trans %}Enter your username or email{% endtrans %}</h1>