If you were found out your self host WordPress is suspected being hacked, and the attacker is still remain login.
To get this fix without letting your Web Host provider, you may use the URL as below to regenerate the secret key.
WordPress Secret Key Generator