diff --git a/docs/ref/contrib/csrf.txt b/docs/ref/contrib/csrf.txt
index 8d352ff8b2..32d8a705bc 100644
--- a/docs/ref/contrib/csrf.txt
+++ b/docs/ref/contrib/csrf.txt
@@ -72,9 +72,9 @@ To enable CSRF protection for your views, follow these steps:
       :func:`~django.shortcuts.render_to_response()` wrapper that takes care
       of this step for you.
 
-The utility script ``extras/csrf_migration_helper.py`` can help to automate the
-finding of code and templates that may need these steps. It contains full help
-on how to use it.
+The utility script ``extras/csrf_migration_helper.py`` (located in the Django
+distribution, but not installed) can help to automate the finding of code and
+templates that may need these steps. It contains full help on how to use it.
 
 .. _csrf-ajax: