There needs to be a way to request a code to be texted or emailed in order to enter a request for monitoring.

Anybody who wants the credit monitoring offered by your site in response to a breach of security can't actually access it due to the need for a code that wasn't sent.