Unlocking happens when either an user admin changes the user's password at the bottom of the user detail admin page or if the user themselves use the forgot password link when logging in on the website.