Why not let the administrator decide?

I do something that so far has worked:

1). Generate a random password consisting of 64 [:album:] with `makepasswd --chars 64`.

2). If the system requires a symbol, I delete the last character, and replace it with a `+`. The choice of `+` is for a reason: when double-clicking the password, the `+` is considered part of the word, and thus I don't need to carefully select the characters.

3). In the rare case where `+` is not accepted as a symbol (happened to me last week, but it's very unusual), I replace it with some other symbol from the list of accepted symbols.

It's still annoying, and certainly doesn't make the password stronger, of course.