A better practice is to use different complex passwords for every site and change them often. If you use the same password and email everywhere, your accounts are only as secure as the least secure site. I'd recommend a password manager like 1password, last pass, bit warden, etc to manage a password list.
Using a special character in a password is a good idea, but I don't see a comma doing much since as mentioned text qualifiers are a pretty standard practice.