content is signed by nsec, the signature is then verified with the npub, so yes you need both to post anything to nostr.

any unsigned or unverified content will be rejected by nostr relays/clients