diff --git a/public/templates/mobile/login/default.tpl b/public/templates/mobile/login/default.tpl
index 258fc26c..2a44cebb 100644
--- a/public/templates/mobile/login/default.tpl
+++ b/public/templates/mobile/login/default.tpl
@@ -1,5 +1,6 @@
       <form action="{$smarty.server.SCRIPT_NAME}?page=login" method="post" id="loginForm" data-ajax="false">
         <input type="hidden" name="to" value="{($smarty.request.to|default:"{$smarty.server.SCRIPT_NAME}?page=dashboard")|escape}" />
+        {if $GLOBAL.csrf.enabled && $GLOBAL.csrf.forms.login}<input type="hidden" name="ctoken" value="{$CTOKEN}" />{/if}
         <p><input type="text" name="username" value="" id="userForm" maxlength="20"></p>
         <p><input type="password" name="password" value="" id="passForm" maxlength="20"></p>
         <center>{nocache}{$RECAPTCHA|default:"" nofilter}{/nocache}</center>