Shannon Entropy is a poor measure of password strength. Guessing Entropy is better but says nothing about a particular password. I propose formal definition of password strength.
Jeffrey Goldberg