it's not really precise to say it's locked, it's encrypted such that only the holder of the nsec corresponding to the npub can spend it

you only have to have the nsec and voila