diff --git a/templates/contacts/list.html b/templates/contacts/list.html
index 551fc4e..14b8981 100644
--- a/templates/contacts/list.html
+++ b/templates/contacts/list.html
@@ -189,6 +189,7 @@
                                 {% if user.email != current_user.email %}
                                 <form method="POST" action="{{ url_for('contacts.delete_contact', id=user.id) }}" class="inline"
                                       onsubmit="return confirm('Are you sure you want to delete this contact?');">
+                                    <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
                                     <button type="submit" 
                                             class="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-full text-sm no-underline transition-colors duration-200"
                                             style="background-color: rgba(239,68,68,0.1); color: #b91c1c;">