Best security practices for a new website include installing SSL certificates, setting up firewalls, regularly updating software and plugins, using strong passwords and authentication methods, performing regular backups, and monitoring your site for unusual activity. WP Dragon also recommends using security plugins and adhering to a strict privacy policy.