diff --git a/resources/views/setup/wizard/database.blade.php b/resources/views/setup/wizard/database.blade.php
index 5eab1b18..031be2c8 100644
--- a/resources/views/setup/wizard/database.blade.php
+++ b/resources/views/setup/wizard/database.blade.php
@@ -8,6 +8,7 @@
 <p>@lang('setup.wizard.database.text')</p>
 
 <form id="setup" method="post" action="{{ url('setup/database') }}" novalidate="novalidate">
+    @csrf
     <table class="form-table">
         <tr class="form-field form-required">
             <th scope="row"><label for="type">@lang('setup.wizard.database.type')</label></th>
diff --git a/resources/views/setup/wizard/info.blade.php b/resources/views/setup/wizard/info.blade.php
index c29dca65..2ae6b39c 100644
--- a/resources/views/setup/wizard/info.blade.php
+++ b/resources/views/setup/wizard/info.blade.php
@@ -8,6 +8,7 @@
 <p>@lang('setup.wizard.info.text')</p>
 
 <form id="setup" method="post" action="{{ url('setup/finish') }}" novalidate="novalidate">
+    @csrf
     <table class="form-table">
         <tr>
             <th scope="row"><label for="email">@lang('setup.wizard.info.admin-email')</label></th>