diff --git a/admin/templates/unprotected_views.html b/admin/templates/unprotected_views.html
new file mode 100644
index 00000000000..167d11e1903
--- /dev/null
+++ b/admin/templates/unprotected_views.html
@@ -0,0 +1,30 @@
+{% extends "base.html" %}
+{% block title %}
+    <title>Unprotected Views</title>
+{% endblock title %}
+{% block content %}
+    <h2>Unprotected Views</h2>
+    <p>These views are marked with <code>login_not_required</code>, so anyone can open them without signing in as staff.</p>
+    <table class="table table-striped table-hover table-responsive">
+        <thead>
+            <tr>
+                <th>Route</th>
+                <th>URL name</th>
+                <th>View</th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for pattern in unprotected_url_patterns %}
+            <tr>
+                <td><code>{{ pattern.route }}</code></td>
+                <td>{{ pattern.name }}</td>
+                <td><code>{{ pattern.view }}</code></td>
+            </tr>
+            {% empty %}
+            <tr>
+                <td colspan="3">Every admin view requires a signed-in staff user.</td>
+            </tr>
+            {% endfor %}
+        </tbody>
+    </table>
+{% endblock content %}