For generated passwords, length and a cryptographically secure random source matter more than clever substitutions. Use a unique password for every account and store it in a password manager. A longer random value from the allowed character set is generally safer than a short string that merely satisfies several composition rules.
Choose symbols when the site accepts them, but do not fight a broken input rule at the cost of making the secret predictable. If you must type it, avoiding look-alike characters can reduce errors; a sufficiently long random passphrase can also be practical. Protect the password-manager account with a strong master secret and keep recovery codes in a separate safe place. Generate a password before you need to reuse an old one.
Akousa