Yes. I use a 22 character password composed of mixed-case alphanumerics and symbols. I generate a new password for every single website I have an account with, no matter how onerous the process or insignificant the account.

Later this year I am considering transitioning every single account to its own email address on my domain as well. But I recognize that's a tad paranoid. Perhaps only the most valuable accounts.

I recommend 1Password. I don't think there has ever been a major security breach with 1Password, and when I reported a minor cryptographic flaw they were very quick to respond to me and plan a fix for it, despite the threat model being relatively small.