diff --git a/tailbone/templates/messages/archive/index.mako b/tailbone/templates/messages/archive/index.mako
index e8c8fe20..f9e9735c 100644
--- a/tailbone/templates/messages/archive/index.mako
+++ b/tailbone/templates/messages/archive/index.mako
@@ -18,9 +18,10 @@
 
 <%def name="grid_tools()">
   ${h.form(url('messages.move_bulk'), name='move-selected')}
-    ${h.hidden('destination', value='inbox')}
-    ${h.hidden('uuids')}
-    <button type="submit">Move 0 selected to Inbox</button>
+  ${h.csrf_token(request)}
+  ${h.hidden('destination', value='inbox')}
+  ${h.hidden('uuids')}
+  <button type="submit">Move 0 selected to Inbox</button>
   ${h.end_form()}
 </%def>
 
diff --git a/tailbone/templates/messages/inbox/index.mako b/tailbone/templates/messages/inbox/index.mako
index a9100b71..cf2d51e9 100644
--- a/tailbone/templates/messages/inbox/index.mako
+++ b/tailbone/templates/messages/inbox/index.mako
@@ -18,9 +18,10 @@
 
 <%def name="grid_tools()">
   ${h.form(url('messages.move_bulk'), name='move-selected')}
-    ${h.hidden('destination', value='archive')}
-    ${h.hidden('uuids')}
-    <button type="submit">Move 0 selected to Archive</button>
+  ${h.csrf_token(request)}
+  ${h.hidden('destination', value='archive')}
+  ${h.hidden('uuids')}
+  <button type="submit">Move 0 selected to Archive</button>
   ${h.end_form()}
 </%def>