An institution may lock a user out of their account after 3-5 repeated failed attempts at authenticating. This will result in an ITEM_LOCKED error.
To fix this, have the user confirm that the credentials being entered are correct by logging directly into their financial institution website using the same set of credentials. Logging into their institution’s portal usually clears the lock. Once the lock is cleared, the user can retry connecting with Plaid.