diff --git a/login/forms.py b/login/forms.py
new file mode 100644
index 0000000..62d272c
--- /dev/null
+++ b/login/forms.py
@@ -0,0 +1,12 @@
+#!/usr/bin/env python3
+"""
+Form(s) for the login page.
+"""
+from django import forms
+
+class LoginForm(forms.Form):
+	"""
+	The main login form.
+	"""
+	username = forms.CharField(label="Username", max_length=20)
+	password = forms.CharField(label="Password", widget=forms.PasswordInput)
diff --git a/login/jinja2/login/index.html b/login/jinja2/login/index.html
index 94ba860..e5c3c13 100644
--- a/login/jinja2/login/index.html
+++ b/login/jinja2/login/index.html
@@ -4,8 +4,7 @@
 <h1>Login</h1>
 <form method="post" action="{{ url('login:index') }}">
 	{{ csrf_input }}
-	<input type="text" placeholder="Username" name="username" maxlength="20" required/><br />
-	<input type="password" placeholder="Password" name="password" maxlength="1024" required/><br />
+	{{ form.as_p() }}
 	<input type="submit" value="Log in" name="submit"/>
 </form>
 {% endblock %}
diff --git a/login/views.py b/login/views.py
index 3a7e5a9..289a15a 100644
--- a/login/views.py
+++ b/login/views.py
@@ -6,20 +6,24 @@ from django.contrib import messages
 from django.shortcuts import redirect, render
 from django.contrib.auth import authenticate, login
 
+from .forms import LoginForm
+
 def index(request):
 	"""
 	The login page.
 	"""
 	if request.method == "GET":
-		context = {}
-		return render(request, 'login/index.html', context)
-	username = request.POST['username']
-	password = request.POST['password']
-	user = authenticate(request, username=username, password=password)
-	if user is not None:
-		login(request, user)
-		messages.success(request, "Logged in")
-		return redirect('homepage:index')
-	else:
-		messages.error(request, "Invalid credentials")
-		return redirect('login:index')
+		form = LoginForm()
+		return render(request, 'login/index.html', {'form': form})
+	form = LoginForm(request.POST)
+	if form.is_valid():
+		user = authenticate(
+			request,
+			username=form.cleaned_data.get('username'),
+			password=form.cleaned_data.get('password'))
+		if user is not None:
+			login(request, user)
+			messages.success(request, "Logged in")
+			return redirect('homepage:index')
+	messages.error(request, "Invalid credentials")
+	return render(request, 'login/index.html', {'form': form})